A healthcare startup is building a secure messaging system for doctors to share patient referrals. They need to ensure that only the intended recipient can read the message, and they want to avoid the complexity of securely distributing a shared secret. Which encryption approach should they use?

Hashing the message with a cryptographic hash function and sending the hash alongside the message.

Symmetric encryption, using a single shared key that is distributed to all doctors in the practice.

Using a simple substitution cipher that maps each letter to a different letter.

Asymmetric encryption, where the sender encrypts the message with the recipient's public key.

Why is encryption key management critical for data security?

Because keys are automatically generated and do not need protection

Because keys are used only for data at rest, not in transit

Because if keys are lost or compromised, encrypted data may become inaccessible or exposed

Because keys are only needed for asymmetric encryption

What is dynamic data masking (DDM)?

A technique that masks data in real time as it is queried, without altering the underlying data

A method that permanently replaces data in the database with fake values

A technique that only masks data during backup and restore operations

A process that encrypts data at rest and decrypts it on access

What is the primary purpose of an access control policy?

To store backup copies of data offsite

To encrypt all data in the organization

To define rules for who can access what data and under what conditions

To monitor network traffic for intrusions

CompTIAData+

Domain 5Objective 3

Compare Privacy and Protection Strategies DA0-001 Practice Questions (Page 4)

Part of the Data governance domain, which accounts for 14% of the DA0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

14%of the exam

Questions 16–20

16application · medium
A healthcare startup is building a secure messaging system for doctors to share patient referrals. They need to ensure that only the intended recipient can read the message, and they want to avoid the complexity of securely distributing a shared secret. Which encryption approach should they use?
Select an answer first
17foundation · easy
Why is encryption key management critical for data security?
Select an answer first
18foundation · easy
What is dynamic data masking (DDM)?
Select an answer first
19foundation · easy
What is the primary purpose of an access control policy?
Select an answer first
20foundation · easy
Which principle should an access control policy enforce to minimize data exposure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DA0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DA0-001” is a trademark of its owner, used for identification only.