Match each cryptographic action to the most appropriate use case.
Drag a concept onto its matching description — or click a concept then click the description.
Protect the data if the laptop is stolen.
Check that the file was not changed during download.
Make identical passwords produce different hash values.
Confirm the file came from the expected sender and stayed intact.
Replace an encryption key on a planned schedule.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Encryption: Ensuring confidentiality
Encryption ensures confidentiality, hashing ensures integrity, digital signatures provide authentication and non-repudiation, key exchange enables secure key distribution, certificate signing establishes trust, and random numbers are essential for key generation.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Encryption: Ensuring confidentiality
Why this is correct
Encryption is the process of transforming plaintext into ciphertext using an algorithm and a cryptographic key, ensuring that unauthorized parties cannot read the data. Confidentiality is achieved because only someone with the correct decryption key can recover the original message. Encryption does not inherently prevent modification, so it is not used for integrity; it specifically protects data from disclosure.
Hashing: Ensuring integrity
Why this is correct
Hashing is a one-way cryptographic function that maps data of arbitrary size to a fixed-length digest. Because any change to the input, even a single bit, produces a completely different digest, hashing is used to verify that data has not been altered. It provides integrity by allowing a recipient to recompute the hash and compare it to the original, but it does not protect confidentiality or prove the identity of the sender.
Digital Signatures: Providing authentication and non-repudiation
Why this is correct
Digital signatures are created by hashing a message and then encrypting that hash with the sender's private key. The recipient decrypts the signature using the sender's public key and compares the resulting hash to one computed from the received message, which verifies the sender's identity and ensures the message originated from them. Because the private key is known only to the sender, the sender cannot deny having signed it, thus providing non-repudiation in addition to authentication.
Key Exchange: Ensuring integrity
Why it's wrong here
Key exchange mechanisms, such as Diffie-Hellman or RSA key transport, are designed to securely establish or distribute symmetric keys between parties. They ensure that the key remains secret during transmission, but they do not validate the integrity of the data that will later be encrypted with that key. Data integrity is instead protected through message authentication codes (MACs) or hashing, so labeling key exchange as an integrity mechanism is incorrect.
Random Number Generation: Providing authentication
Why it's wrong here
Random number generation produces unpredictable values used for cryptographic keys, nonces, salts, or initialization vectors, which are essential for secure encryption and signature schemes. However, randomness alone does not authenticate a user or prove the source of a message; authentication requires credentials, digital signatures, or challenge-response protocols. Therefore, using random number generation for authentication is a category error, as its role is to provide the entropy that underpins many other cryptographic operations.
Go deeper
Learn chapter
PKI and Digital Certificates
Key term
Non-repudiation
Non-repudiation is a security principle that ensures a party in a digital transaction cannot deny their involvement or the authenticity of their digital signature.
Key term
Confidentiality
Confidentiality means keeping sensitive information secret and accessible only to authorized people or systems.
About these practice questions
Courseiva writes every SY0-701 question from scratch — 1,013 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.