A global financial institution must comply with both GDPR (for EU customer data) and a new domestic regulation requiring that all financial transaction logs be stored within the country's borders for at least five years. The institution currently uses a multi-region cloud database. The compliance team is evaluating a solution that replicates data to a region within the country for the required retention period. What is the most significant data protection consideration this solution must address?

Data lifecycle management to delete the logs after five years

Data masking of the transaction logs

Data sovereignty and residency requirements

Data classification of the transaction logs

A company labels its data as 'Public', 'Internal', 'Confidential', and 'Restricted'. What is the primary purpose of this labeling scheme?

To comply with data retention laws automatically

To reduce storage costs by identifying redundant data

To categorize data based on sensitivity and importance

A software development team is releasing a new firmware update. To ensure that the firmware file has not been corrupted or tampered with during download, the team publishes a SHA-256 hash of the file on their website. What is the primary purpose of this practice?

To compress the firmware file for faster download

To verify the integrity of the firmware file

To authenticate the source of the firmware

A security analyst wants to verify that a downloaded software file has not been corrupted or tampered with. Which method is specifically designed for this purpose?

Computing a hash of the file and comparing it to the published hash

Applying a digital signature to the file

CompTIASecurity+

Domain 3Objective 3

Data Protection SY0-701 Practice Questions (Page 3)

Part of the Security architecture domain, which accounts for 18% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

18%of the exam

Questions 11–15

11expert · hard
A global financial institution must comply with both GDPR (for EU customer data) and a new domestic regulation requiring that all financial transaction logs be stored within the country's borders for at least five years. The institution currently uses a multi-region cloud database. The compliance team is evaluating a solution that replicates data to a region within the country for the required retention period. What is the most significant data protection consideration this solution must address?
Select an answer first
12foundation · easy
A company labels its data as 'Public', 'Internal', 'Confidential', and 'Restricted'. What is the primary purpose of this labeling scheme?
Select an answer first
13application · medium
A software development team is releasing a new firmware update. To ensure that the firmware file has not been corrupted or tampered with during download, the team publishes a SHA-256 hash of the file on their website. What is the primary purpose of this practice?
Select an answer first
14foundation · easy
A database administrator needs to protect credit card numbers in a production database while allowing applications to perform exact-match lookups without revealing the original values. Which data securing method is most appropriate?
Select an answer first
15foundation · easy
A security analyst wants to verify that a downloaded software file has not been corrupted or tampered with. Which method is specifically designed for this purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Data Protection SY0-701 Practice Questions (Page 3)

Questions 11–15

A company labels its data as 'Public', 'Internal', 'Confidential', and 'Restricted'. What is the primary purpose of this labeling scheme?

A software development team is releasing a new firmware update. To ensure that the firmware file has not been corrupted or tampered with during download, the team publishes a SHA-256 hash of the file on their website. What is the primary purpose of this practice?

A database administrator needs to protect credit card numbers in a production database while allowing applications to perform exact-match lookups without revealing the original values. Which data securing method is most appropriate?

A security analyst wants to verify that a downloaded software file has not been corrupted or tampered with. Which method is specifically designed for this purpose?

Keep studying — Security architecture