200-201 Security Concepts Practice Question
An organization needs to ensure that a document has not been altered and to verify the sender's identity. Which combination of cryptographic techniques should be used?
⚠ Common exam trap
200-201 often tests the pairing of hashing with digital signatures — candidates pick 'asymmetric encryption and hashing' thinking encryption alone authenticates, but only a digital signature binds the sender's identity to the hash.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Digital signature and hashing
A digital signature provides authentication (verifying the sender's identity via their private key) and integrity (proving the document was not altered), while hashing produces the fixed-length digest that the signature signs. Together they satisfy both requirements: the hash detects any modification, and the asymmetric signature binds the document to the sender's private key.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Digital signature and hashing
Why this is correct
Hashing produces a fixed-length digest that detects any alteration to the document, satisfying the integrity requirement. Signing that hash with the sender's private key lets the recipient verify it using the public key, proving the sender's identity and origin.
- ✗
Digital signature and symmetric encryption
Why it's wrong here
Symmetric encryption alone cannot verify sender identity, since both parties share one key, so no origin proof exists; a digital signature already supplies integrity and authentication. Symmetric encryption suits bulk data confidentiality, such as encrypting large files at rest, not proving authorship or detecting tampering.
- ✗
Symmetric encryption and hashing
Why it's wrong here
Hashing detects alteration but provides no sender authentication, and symmetric encryption's shared key means either party could have produced the document. This pairing suits verifying file integrity during transfer between trusted parties, not confirming which specific identity originated and signed the content.
- ✗
Asymmetric encryption and hashing
Why it's wrong here
Asymmetric encryption and hashing supply confidentiality and integrity but not origin authentication, because anyone holding the public key can encrypt; hashing alone cannot bind an identity. This combination suits encrypting data to a recipient and checking it arrived unchanged, not proving the sender's identity.
Quick reference
Symmetric Encryption Algorithm Comparison
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
About these practice questions
Courseiva writes every 200-201 question from scratch — 968 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.