A document is classified as 'Confidential'. According to standard data handling procedures, what should an employee do when sending this document via email?

Change the classification to 'Internal' to simplify sending

Send it without any special measures because it is not top secret

Encrypt the email or use a secure file transfer method

Print the document and mail it to the recipient

An organization is implementing a data classification scheme. Which step is essential for the scheme to be effective?

Encrypting all data regardless of classification

Defining clear classification levels and criteria

Storing all classified data in a single location

Automatically deleting data after one year

An employee finds a USB drive labeled 'Restricted' in a parking lot. What is the appropriate handling procedure according to data classification policies?

Destroy the USB drive to prevent data leakage

Plug it into a workstation to identify the owner

Report it to the security team immediately

A multinational corporation with offices in the EU and the US stores customer personal data in a cloud database. The EU subsidiary is subject to GDPR, which requires that personal data of EU residents be processed in a manner that ensures their rights are protected. The company is considering moving the database to a US-based cloud provider. What is the primary data protection consideration the company must address?

Data lifecycle management to delete the data after one year

Data masking of all personal data before transfer

Data classification of the database as public

Data sovereignty and international data transfer regulations

CompTIASecurity+

Domain 3Objective 3

Data Protection SY0-701 Practice Questions (Page 5)

Part of the Security architecture domain, which accounts for 18% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

18%of the exam

Questions 21–25

21foundation · easy
An organization is designing a data retention policy that specifies how long customer records are kept and when they should be securely deleted. Which data protection consideration does this policy primarily address?
Select an answer first
22foundation · easy
A document is classified as 'Confidential'. According to standard data handling procedures, what should an employee do when sending this document via email?
Select an answer first
23foundation · easy
An organization is implementing a data classification scheme. Which step is essential for the scheme to be effective?
Select an answer first
24foundation · easy
An employee finds a USB drive labeled 'Restricted' in a parking lot. What is the appropriate handling procedure according to data classification policies?
Select an answer first
25application · medium
A multinational corporation with offices in the EU and the US stores customer personal data in a cloud database. The EU subsidiary is subject to GDPR, which requires that personal data of EU residents be processed in a manner that ensures their rights are protected. The company is considering moving the database to a US-based cloud provider. What is the primary data protection consideration the company must address?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Data Protection SY0-701 Practice Questions (Page 5)

Questions 21–25

An organization is designing a data retention policy that specifies how long customer records are kept and when they should be securely deleted. Which data protection consideration does this policy primarily address?

A document is classified as 'Confidential'. According to standard data handling procedures, what should an employee do when sending this document via email?

An organization is implementing a data classification scheme. Which step is essential for the scheme to be effective?

An employee finds a USB drive labeled 'Restricted' in a parking lot. What is the appropriate handling procedure according to data classification policies?

Keep studying — Security architecture