Question 979 of 1,013
SY0-701 General Security Concepts Practice Question
Exhibit
C:\Downloads> certutil -hashfile CU-2026-02.msu SHA256 SHA256 hash of CU-2026-02.msu: 9f2c3a1b8d4e0f77c0d2e6b5f0a4b1c8d9e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6 Vendor portal published hash: 9f2c3a1b8d4e0f77c0d2e6b5f0a4b1c8d9e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7
Based on the exhibit, what should the administrator do next?
⚠ Common exam trap
Watch out — candidates often confuse hash length or file naming with file integrity, leading candidates to think a longer hash means a newer file or that renaming fixes hash mismatches, when in fact only re-downloading and re-verifying the hash ensures the file is authentic and uncorrupted.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Re-download the update from the trusted source and verify the hash again.
If the hash of a downloaded file does not match the vendor-published hash, the file is likely corrupted or tampered with. The administrator should delete the corrupted file, re-download it from the trusted source, and recompute the hash to ensure integrity before installation. This follows the principle of verifying file integrity via cryptographic hashing (e.g., SHA-256) before applying updates.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Install the update because a longer hash means the file is newer.
Why it's wrong here
A longer-looking hash does not mean the file is newer or safer. The published value and the computed value do not match, so the file cannot be trusted for installation. Installing it would ignore the integrity check.
- ✓
Re-download the update from the trusted source and verify the hash again.
Why this is correct
A hash mismatch means the local file does not match the vendor-published value. The safest next step is to obtain a fresh copy from a trusted source and compare the hash again. That helps determine whether the original download was corrupted in transit or tampered with before deployment.
- ✗
Rename the file to match the vendor’s naming convention and retry installation.
Why it's wrong here
The filename has no effect on the cryptographic hash. Renaming the file does not resolve the mismatch and does not prove the content is authentic. The administrator must validate the actual bytes, not the label attached to them.
- ✗
Disable SHA-256 verification because patch files often change after download.
Why it's wrong here
Disabling verification would remove the very integrity check designed to catch corruption or tampering. Patch files should not change after a proper download from a trusted vendor source. The mismatch is a warning sign, not a reason to ignore the check.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on SY0-701
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A systems administrator downloads a patch and a SHA-256 checksum file from the vendor. The administrator hashes the patch locally and the values match. What does the matching hash primarily confirm?
medium- ✓ A.The file has not been altered since the vendor published the checksum.
- B.The file remains confidential during transmission.
- C.The vendor's private key was used to encrypt the patch.
- D.The patch will definitely install successfully on every system.
Why A: A SHA-256 checksum is a cryptographic hash that acts as a fingerprint for the file. When the locally computed hash matches the vendor-published checksum, it confirms the file's integrity — that the patch has not been modified or corrupted since the vendor generated the checksum. This does not verify confidentiality, authenticity of the signer, or installation success.
Variation 2. A system administrator downloads a vendor patch package and a separate checksum file. After the download completes, the administrator runs a command that produces a SHA-256 value for the package and compares it to the vendor's published value. Which cryptographic primitive is being used for the comparison?
medium- ✓ A.Hashing
- B.Symmetric encryption
- C.Digital signatures
- D.Asymmetric encryption
Why A: The administrator is using SHA-256 to compute a fixed-length digest of the downloaded package and comparing it to the vendor's published checksum. This is a classic application of a cryptographic hash function (hashing), which produces a unique, irreversible fingerprint of data. The comparison verifies integrity—ensuring the package has not been altered during transit—but does not provide authentication or non-repudiation.
Last reviewed: Jun 11, 2026
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.