Exam CISA topic 1 question 423 discussion

While public key encryption (option A) can also help protect the confidentiality and integrity of online orders by encrypting the data during transmission, it primarily focuses on confidentiality rather than integrity verification. Digital signatures, on the other hand, are specifically designed to provide integrity assurance by verifying the authenticity and unaltered nature of the data.

Applications of Public Key Encryption: Secure communication channels: Public key encryption is used in various protocols like HTTPS (Secure Hypertext Transfer Protocol) to secure communication between web browsers and servers, ensuring the confidentiality and integrity of data transmission. Digital signatures: Public key encryption forms the foundation for digital signatures, which allow users to electronically sign documents to verify their authenticity and integrity. Secure email communication: Public key encryption can be used to encrypt email messages, ensuring only the intended recipient can read them.

A Is more about confidentiality, It alone does not provide integrity. digital signature ensures both the integrity and authenticity of a message.

pki method

whats the link between data integrity and the encryption

B. Digital signature