Which Control Attributes Messages to Individuals? Non-Repudiation

SY0-701 By islever Editorial Last updated

Summarize fundamental security concepts. Explain the importance of using appropriate cryptographic solutions.

Short answer

B Non-repudiation uses digital signatures and PKI to prove a message originated from a specific individual and prevent later denial, which is the attribution the question asks for.

Question

Which of the following allows for the attribution of messages to individuals?
  1. Adaptive identity
  2. Non-repudiation Correct Answer
  3. Authentication
  4. Access logs

Key Takeaways

It tests the difference between authentication at login and cryptographic proof of message origin; the trap is choosing authentication because it also sounds like proof of identity.

This SY0-701 question asks which control allows message attribution; the correct answer is B, non-repudiation, because digital signatures and PKI bind a message to its sender.

Common mistake: Option C, authentication, is the most plausible wrong answer because it verifies who a user is, but it does not by itself bind a particular message to that user or prevent later denial.

Expert Analysis

The tempting shortcut: authentication Option C is the most attractive wrong answer. Authentication proves that a user presented valid credentials at sign-in, so it feels like it "attributes" activity to a person. The stem, however, asks about attribution of messages—tying a specific message or transaction to an individual after the fact. Authentication only establishes identity for a session; it does not create evidence binding that session's message to the user or stop the user from later denying authorship, especially with shared accounts or stolen credentials.

What non-repudiation actually adds Option B is correct. Non-repudiation provides proof of origin and integrity: a digital signature made with a sender's private key and verified with the corresponding public key ties the message to that identity, and any alteration breaks verification. That cryptographic evidence is what allows a message to be attributed to an individual and prevents a credible claim that someone else sent it.

Why the other options miss Option D, access logs, can show that an account accessed a system at a time, but logs are not cryptographic proof of authorship and may be incomplete or tampered with. Option A, adaptive identity, is a risk-based access concept that changes authentication requirements based on context; it does not produce message-level attribution.

Reading the wording The awkward phrase "attribution of messages" caused discussion; learners paraphrased attribution as ascribing a message to a person and settled on non-repudiation. Using that definition, only B supplies the proof needed.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When a question asks what allows attribution or proves origin, look for the control that creates evidence the sender cannot later deny, not merely one that validates identity at login. Eliminate login-time controls such as authentication and adaptive identity unless the stem explicitly asks about session access; then choose non-repudiation when signatures, PKI, or message binding appear. For log-based options, ask whether the log alone can prove authorship and withstand tampering.

Frequently Asked Questions

Why is authentication not the answer if it verifies a user's identity?

Authentication confirms identity at sign-in, but it does not create per-message evidence or prevent a sender from denying authorship. Non-repudiation adds digital signatures and PKI so a specific message can be tied to an individual.

How does non-repudiation attribute a message to an individual?

The sender signs the message with a private key; a verifier uses the corresponding public key to confirm origin and integrity, so the sender cannot credibly deny sending it.

Can access logs prove who sent a message?

Access logs can show account activity, but they are not cryptographic proof of authorship and can be incomplete or altered, so they do not provide non-repudiation by themselves.

More SY0-701 FAQ →

Community Votes

B
92%
D
8%

92% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 17 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 17

  1. Yoez 👍 71
    I can't understand the sentence. Bad question
  2. 123456789User 👍 14 Answered B
    Non-repudiation - provides proof of the origin. Prevents individuals from denying involvement in sending the message.
  3. uday1985 👍 11
    Message attribute associated with a person!!!!! its verifying that a specific individual sent the message! this is non-repudiation !! Ez lemon squeezy
  4. d4a5620 👍 8 Answered B
    The wording on this question is absolutely horrendous but the answer is B
  5. shady23 👍 8 Answered B
    B. Non-repudiation
Show 12 more comments
  1. dbrowndiver 👍 4 Answered B
    Attribution of Messages: By implementing non-repudiation, organizations can confirm the source of a message or transaction. This is essential for legal and security purposes, as it prevents individuals from denying their actions or communications. Digital Signatures: Commonly used in emails and transactions, digital signatures are a key component of non-repudiation, as they uniquely identify the sender and confirm the message's origin. Why it is the best choice is bc Non-repudiation directly addresses the need to attribute messages to individuals, ensuring accountability and trust in communications.
  2. braveheart22 👍 4 Answered B
    The correct answer is B. Non-repudiation. Non-repudiation refers to the ability to ensure that a person or entity cannot deny having sent or received a message. It provides a way to attribute actions or messages to specific individuals, typically through mechanisms such as digital signatures or secure logging. This guarantees that the sender of the message cannot later claim they did not send it, offering legal and security assurances.
  3. _thelastturtle 👍 4 Answered D
    Didnt understand the question
  4. Arshedconoco 👍 3
    So true that the wording of this question is very bad
  5. KelvinYau 👍 3 Answered B
    i don't understand this question.
  6. Marc_s 👍 2 Answered B
    This kind of helped me understand the question better. This is the Oxford dictionary definition of "attribution": at·tri·bu·tion /ˌatrəˈbyo͞oSHən/ noun the action of regarding something as being caused by a person or thing. "the electorate was disillusioned with his immediate attribution of the bombings to a separatist group" the action of ascribing a work or remark to a particular author, artist, or person. "the study of Constable is fraught with problems of attribution" the action of regarding a quality or feature as characteristic of or possessed by a person or thing. "the attribution of human emotions to inanimate objects"
  7. 5a11b63 👍 2 Answered B
    Non-repudiation is the ability to prove that a message or document was sent or signed by a particular person, and that the person cannot deny sending or signing it. Non-repudiation can be achieved by using cryptographic techniques, such as hashing and digital signatures, that can verify the authenticity and integrity of the message or document. Non-repudiation can be useful for legal, financial, or contractual purposes, as it can provide evidence of the origin and content of the message or document.
  8. 7d6fad2 👍 2 Answered B
    I'm on the same boat as others, I totally did not understand the question. Message attributes? I had no idea what that meant. I appreciate Marc_S for the dictionary definition of "Attribution" (being caused by a person or thing). Hence, Non-Repudiation proves who sent the message.
  9. itone333 👍 2 Answered B
    ‘Attribution’ is crazy
  10. kejo2 👍 1 Answered B
    Correct answer: B. Non-repudiation Why? Non-repudiation provides proof that a specific individual performed an action, such as sending a message, and prevents that person from later denying it. In practice, non-repudiation is achieved through: Digital signatures Public Key Infrastructure (PKI) Cryptographic proof of origin This allows messages and transactions to be attributed to a specific individual.
  11. deejay2 👍 1
    Nevermind, attribution means acknowledgement. So, B is right.
  12. deejay2 👍 1
    If attribution means source, the answer is C.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide