Exam CISSP-ISSAP topic 1 question 19 discussion

D. Non-repudiation Authentication is not incorrect in the context of proving that the sender really sent a particular message, but it may not be the most precise answer. Authentication does play a crucial role in verifying the identity of a sender, ensuring that they are who they claim to be. However, authentication alone does not provide explicit evidence or mechanisms to prove that a specific message was sent by a particular sender. While authentication establishes trust and confirms the identity of individuals or systems involved in communication, non-repudiation provides proof and assurance regarding actions performed by those authenticated entities. Non-repudiation mechanisms like digital signatures can link an individual's identity to specific messages or data, making it difficult for them to deny their involvement later on. These mechanisms offer legal liability protection by providing evidence that proves both message integrity and origin.