Which practice is essential for maintaining the security of encryption keys over time?

Rotating keys periodically and retiring old keys

Storing keys in plain text in a configuration file

Keeping keys unchanged for the lifetime of the system

Using the same key for all systems to simplify management

An organization is migrating to a new encryption key management system. The security team wants to ensure that keys are rotated regularly and that old keys are securely destroyed. Which practice should the administrator implement?

Rotate keys manually every year and keep old keys in a backup

Store old keys in a plaintext file for disaster recovery

Use the same key for all data and never rotate it

Automate key rotation and securely delete old keys after a defined period

Which mechanism is commonly used to automatically enforce data retention policies on a file server?

Data lifecycle management tools

A hospital is deploying a new patient-records system. The compliance officer requires that all protected health information (PHI) be encrypted both at rest and in transit. The system will use a symmetric cipher for database encryption and an asymmetric cipher for secure key exchange. Which combination of algorithms should the administrator choose?

DES for data at rest and RSA-1024 for key exchange

RSA-2048 for data at rest and AES-256 for key exchange

AES-256 for data at rest and RSA-2048 for key exchange

AES-256 for both data at rest and key exchange

A hospital must retain medical records for 10 years, but some records contain sensitive mental health information that must be deleted after 5 years. The hospital also wants to ensure that deleted records cannot be recovered. Which approach should the administrator implement?

Encrypt all records and store them for 15 years

Store all records for 10 years and then delete them all

Apply different retention policies based on data classification, and use secure deletion for records that reach their retention limit

Delete all records after 5 years

CompTIAServer+

Domain 3Objective 1

Data Security SK0-005 Practice Questions (Page 1)

Part of the Security and disaster recovery domain, which accounts for 24% of the SK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

24%of the exam

Questions 1–5

1foundation · easy
Which practice is essential for maintaining the security of encryption keys over time?
Select an answer first
2expert · hard
An organization is migrating to a new encryption key management system. The security team wants to ensure that keys are rotated regularly and that old keys are securely destroyed. Which practice should the administrator implement?
Select an answer first
3foundation · easy
Which mechanism is commonly used to automatically enforce data retention policies on a file server?
Select an answer first
4application · medium
A hospital is deploying a new patient-records system. The compliance officer requires that all protected health information (PHI) be encrypted both at rest and in transit. The system will use a symmetric cipher for database encryption and an asymmetric cipher for secure key exchange. Which combination of algorithms should the administrator choose?
Select an answer first
5expert · hard
A hospital must retain medical records for 10 years, but some records contain sensitive mental health information that must be deleted after 5 years. The hospital also wants to ensure that deleted records cannot be recovered. Which approach should the administrator implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SK0-005” is a trademark of its owner, used for identification only.