SY0-701 General Security Concepts Practice Question
A company uses an encryption key for a database backup process. The key is being replaced because the old one is near the end of its approved use period. What is this action called?
⚠ Common exam trap
Many exam-takers confuse key rotation with other key management terms like key escrow or key archival, or incorrectly assume that 'rotation' implies a physical or mechanical action rather than a cryptographic lifecycle process.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Key rotation, because an older key is replaced with a new one on schedule.
Key rotation is the scheduled replacement of an older encryption key with a new one, typically performed before the end of the key's cryptoperiod to maintain security and compliance. In this scenario, the database backup key is being replaced because it is near the end of its approved use period, which directly matches the definition of key rotation. This practice limits the amount of data encrypted with a single key and reduces the impact of a potential key compromise.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Key rotation, because an older key is replaced with a new one on schedule.
Why this is correct
Key rotation is the planned replacement of cryptographic keys over time. Rotating keys reduces exposure if a key is mishandled, limits the amount of data protected by any one key, and supports good key lifecycle management.
- ✗
Key compression, because the key is made smaller before use.
Why it's wrong here
Key compression is not a recognized security control in cryptography. AES, RSA, and ECC keys have fixed, standardized lengths (e.g., 128/256 bits or 2048/4096 bits) that are chosen for mathematical strength; compressing a key would alter its bit sequence and invalidate its structure, rendering it useless for encryption or decryption. Even if a key were merely shortened for storage, the actual key material used by the cryptographic algorithm must remain exactly as generated, so shrinking it provides no security benefit and would break the backup process. The real vulnerability is protecting a working key over time, not its size.
- ✗
Key translation, because the key is converted into another language.
Why it's wrong here
Key translation is not a cryptographic term of art; converting a key into another language, such as replacing hex bytes with words in French, is merely obfuscation, not a security control. Cryptographic keys are binary values used directly by algorithms, so translating them into human language would destroy their mathematical properties and make them unusable for encryption. This does not address the objective of limiting the validity period of the key or reducing the impact of a compromised key. The security principle in question is lifecycle management, not presentation of the key in a different alphabet or script.
- ✗
Key formatting, because the key is stored in a different file type.
Why it's wrong here
Key formatting, such as changing a .key file to .pem or .der, is a serialization or encoding detail, not a lifecycle event. While a key can be stored in different formats, the underlying key material remains unchanged, so this does not mitigate the risk of long-term key exposure. The backup process here requires retiring the older key and introducing a fresh one on a regular schedule—an operational security practice—whereas formatting is a one-time storage adjustment. Misunderstanding this distinction can lead to a false sense of security if an administrator merely converts files instead of rotating the actual cryptographic material.
Go deeper
Related to this question
Learn chapter
Security Controls
Key term
Encryption key
An encryption key is a string of random characters used by an algorithm to lock (encrypt) and unlock (decrypt) data, ensuring only authorized parties can read it.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
One of 1,013 original SY0-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.