ISC2 CC Security Principles Practice Question
A financial institution wants to ensure that a wire transfer request cannot be denied by the sender later. The security team implements a mechanism where the sender's private key is used to sign the transaction. Which security principle does this primarily support?
⚠ Common exam trap
The trap here is assuming that digital signatures only provide integrity, overlooking that they also deliver non-repudiation, which is the key requirement in this scenario.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Non-repudiation
The correct answer is non-repudiation. Using a private key to sign a wire transfer provides proof of origin and prevents the sender from denying the transaction. While digital signatures also support integrity, the specific requirement to prevent denial makes non-repudiation the primary principle. Confidentiality and availability are unrelated to this scenario's goal.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Availability
Why it's wrong here
Availability ensures timely and reliable access to information and systems. The scenario does not address system uptime or access to the wire transfer system; it focuses on preventing denial of the transaction. Therefore, availability is not the principle being supported by the digital signature mechanism.
- ✗
Integrity
Why it's wrong here
Integrity ensures data is not altered improperly. Digital signatures do provide integrity by detecting changes, but the scenario specifically emphasizes preventing the sender from denying the transaction. While integrity is a component, the overarching goal described is non-repudiation, which is a distinct principle. Therefore, integrity alone does not fully capture the intent.
- ✓
Non-repudiation
Why this is correct
Non-repudiation ensures that a party cannot deny the authenticity of their signature on a document or the sending of a message. By signing the wire transfer with a private key, the sender cannot later claim they did not authorize it. This directly supports non-repudiation, which is crucial for financial transactions to prevent fraud and disputes.
- ✗
Confidentiality
Why it's wrong here
Confidentiality ensures information is not disclosed to unauthorized parties. While encryption can provide confidentiality, the scenario uses a digital signature to prevent denial, not to hide the transfer details. The private key signing does not inherently encrypt the message for secrecy; it provides proof of origin. Thus, confidentiality is not the primary principle supported here.
Go deeper
Related to this question
Key term
Non-repudiation
Non-repudiation is a security principle that ensures a party in a digital transaction cannot deny their involvement or the authenticity of their digital signature.
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
About these practice questions
One of 989 original CC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.