A legal firm must retain case files for a minimum of five years after case closure, but some files contain sensitive information that should be restricted to authorized personnel only. The firm wants to automate the retention process. Which combination of actions should the administrator implement?

Encrypt all files and set a retention policy that keeps them for ten years

Store all files in a single shared folder and manually delete files older than five years

Use a backup system that retains all versions of files indefinitely

Apply a classification label to each file and configure a retention policy that deletes files after five years

A multinational company must encrypt data at rest in its data centers. The security team wants to use a hardware security module (HSM) to store keys, but the budget is limited. The data is not highly sensitive, but the company wants to avoid the cost of a dedicated HSM per server. Which approach should the administrator recommend?

Use a centralized HSM appliance that serves multiple servers

Do not encrypt the data to save costs

Use a different encryption algorithm that does not require key management

Use software-based key storage on each server

An organization is implementing a data classification system. The security team wants to ensure that encryption keys are managed differently based on the classification of the data they protect. Which approach should the administrator recommend?

Use separate encryption keys for each classification level, with stricter key management for higher classifications

Use the same key for encryption and decryption of all data

Use a single encryption key for all data to simplify management

Store all keys in a plaintext file on the server

Which factor most directly determines how long an organization should retain a specific type of data?

The storage capacity of the server

The preference of the system administrator

The data's classification and applicable regulations

CompTIAServer+

Domain 3Objective 1

Data Security SK0-005 Practice Questions (Page 2)

Part of the Security and disaster recovery domain, which accounts for 24% of the SK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

24%of the exam

Questions 6–10

6foundation · easy
A security administrator needs to choose a symmetric encryption algorithm to encrypt data at rest on a file server. Which algorithm is a widely accepted symmetric cipher suitable for this purpose?
Select an answer first
7application · medium
A legal firm must retain case files for a minimum of five years after case closure, but some files contain sensitive information that should be restricted to authorized personnel only. The firm wants to automate the retention process. Which combination of actions should the administrator implement?
Select an answer first
8expert · hard
A multinational company must encrypt data at rest in its data centers. The security team wants to use a hardware security module (HSM) to store keys, but the budget is limited. The data is not highly sensitive, but the company wants to avoid the cost of a dedicated HSM per server. Which approach should the administrator recommend?
Select an answer first
9application · medium
An organization is implementing a data classification system. The security team wants to ensure that encryption keys are managed differently based on the classification of the data they protect. Which approach should the administrator recommend?
Select an answer first
10foundation · easy
Which factor most directly determines how long an organization should retain a specific type of data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SK0-005” is a trademark of its owner, used for identification only.

Data Security SK0-005 Practice Questions (Page 2)

Questions 6–10

A security administrator needs to choose a symmetric encryption algorithm to encrypt data at rest on a file server. Which algorithm is a widely accepted symmetric cipher suitable for this purpose?

A legal firm must retain case files for a minimum of five years after case closure, but some files contain sensitive information that should be restricted to authorized personnel only. The firm wants to automate the retention process. Which combination of actions should the administrator implement?

An organization is implementing a data classification system. The security team wants to ensure that encryption keys are managed differently based on the classification of the data they protect. Which approach should the administrator recommend?

Which factor most directly determines how long an organization should retain a specific type of data?

Keep studying — Security and disaster recovery