A university is implementing a data classification scheme. They have defined 'Public', 'Internal', 'Restricted', and 'Highly Restricted' levels. The IT department needs to ensure that 'Highly Restricted' data, such as student financial aid records, is only accessible to a small group of authorized financial aid officers. What is the most effective control to implement?

Apply data masking to hide the data from all users

Encrypt the data with a strong encryption algorithm

Implement role-based access control (RBAC) with a 'Financial Aid Officer' role

Store the data on a separate, offline server

A customer support application displays a user's full social security number (SSN) to agents. The security team wants to reduce the risk of SSN exposure while still allowing agents to verify the user's identity. Which data securing method should be implemented?

Data masking to show only the last four digits of the SSN

Tokenization of the SSN in the database

Encryption of the SSN in transit

CompTIASecurity+

Domain 3Objective 3

Data Protection SY0-701 Practice Questions (Page 2)

Part of the Security architecture domain, which accounts for 18% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

18%of the exam

Questions 6–10

6application · medium
A university is implementing a data classification scheme. They have defined 'Public', 'Internal', 'Restricted', and 'Highly Restricted' levels. The IT department needs to ensure that 'Highly Restricted' data, such as student financial aid records, is only accessible to a small group of authorized financial aid officers. What is the most effective control to implement?
Select an answer first
7foundation · easy
A multinational company stores personal data of EU citizens in a data center located in the United States. Which concept is most directly concerned with the legal requirements for transferring this data across borders?
Select an answer first
8application · medium
A company is designing a data retention policy. They have determined that customer transaction records must be kept for seven years for tax purposes, but marketing email addresses must be deleted as soon as the customer unsubscribes. What is the primary data protection consideration driving this policy?
Select an answer first
9foundation · easy
A company stores customer emails, social media posts, and video recordings for analysis. Which data type do these items represent?
Select an answer first
10application · medium
A customer support application displays a user's full social security number (SSN) to agents. The security team wants to reduce the risk of SSN exposure while still allowing agents to verify the user's identity. Which data securing method should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Data Protection SY0-701 Practice Questions (Page 2)

Questions 6–10

A multinational company stores personal data of EU citizens in a data center located in the United States. Which concept is most directly concerned with the legal requirements for transferring this data across borders?

A company stores customer emails, social media posts, and video recordings for analysis. Which data type do these items represent?

A customer support application displays a user's full social security number (SSN) to agents. The security team wants to reduce the risk of SSN exposure while still allowing agents to verify the user's identity. Which data securing method should be implemented?

Keep studying — Security architecture