SY0-701 General Security Concepts Practice Question
A user downloads a company software update and wants to verify it really came from the vendor and was not changed in transit. Which cryptographic feature should they check?
⚠ Common exam trap
A common mix-up: candidates confuse file properties (name, size) or simple access controls (password protection) with cryptographic verification, overlooking that only a digital signature provides non-repudiation and tamper evidence.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A digital signature from the vendor
A digital signature from the vendor provides cryptographic proof of both authenticity (the file originated from the claimed vendor) and integrity (the file has not been altered in transit). The vendor signs the file with their private key, and the user verifies the signature using the vendor's public key; if the signature is valid, the file is genuine and unchanged.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A digital signature from the vendor
Why this is correct
A digital signature lets the user verify both the source and the integrity of the update. If the signature is valid, the file was signed by the expected private key holder and has not been altered since signing.
- ✗
A longer filename with the vendor name in it
Why it's wrong here
A longer filename containing the vendor's name is merely a metadata label and can be set arbitrarily by anyone. An attacker can easily rename a malicious executable to match a legitimate vendor's naming convention. Filenames provide no cryptographic binding to the file's origin or content, so they offer zero assurance of authenticity or integrity.
- ✗
A larger file size than the previous update
Why it's wrong here
File size is a superficial property that has no relationship to the file's origin or integrity. An attacker can craft a trojanized update to match or exceed the expected size, or a legitimate update could differ in size for benign reasons. Without a cryptographic hash or signature, size gives the user no way to detect modification or confirm the vendor's identity.
- ✗
A password protected ZIP file
Why it's wrong here
A password-protected ZIP archive only provides confidentiality through encryption, restricting who can open it, but it does not authenticate the creator. Anyone can create a password-protected ZIP, and password protection does not prevent the archive's contents from being altered before distribution. Even if the ZIP opens with a known password, the user cannot verify that the files inside were produced by the vendor or remain unmodified.
Go deeper
Related to this question
Learn chapter
PKI and Digital Certificates
Key term
Integrity
Integrity is the assurance that data has not been altered or tampered with in an unauthorized way, preserving its accuracy and consistency from source to destination.
Key term
Digital signature
A cryptographic technique used to verify the authenticity and integrity of a digital message or document, ensuring it came from the claimed sender and was not altered.
About these practice questions
One of 1,013 original SY0-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.