Match each cryptographic concept to its best purpose.
Drag a concept onto its matching description — or click a concept then click the description.
Makes data unreadable to anyone who does not have the correct key.
Creates a fixed-size fingerprint to detect whether data changed.
Adds random data before hashing passwords so identical passwords look different.
Lets others verify who signed the file and that it was not altered.
Replaces an encryption key before its approved lifetime ends.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Confidentiality: Protects data from unauthorized disclosure
Confidentiality protects secrecy, integrity prevents tampering, authentication confirms identity, non-repudiation ensures proof of origin, availability ensures uptime, and accountability enables audit trails.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Confidentiality: Protects data from unauthorized disclosure
Why this is correct
Confidentiality ensures that data is accessible only to authorized individuals, systems, or processes. This is typically enforced through encryption, access control lists, and secure communication protocols. The goal is to prevent unauthorized disclosure, whether during storage, transmission, or processing, thereby protecting privacy and sensitive information.
Integrity: Ensures data is not tampered with or altered
Why this is correct
Integrity ensures that data remains unchanged from its original state unless modified by an authorized entity. This is achieved using cryptographic hash functions, digital signatures, or checksums, which detect any unauthorized alteration or tampering. The focus is on maintaining data accuracy and completeness, not on keeping data secret.
Authentication: Verifies the identity of a user or system
Why this is correct
Authentication verifies the claimed identity of a user, system, or device before granting access or performing actions. This is accomplished via something you know (passwords), something you have (tokens), something you are (biometrics), or a combination (multi-factor). It differs from authorization, which determines what an authenticated entity is allowed to do.
Non-repudiation: Provides proof of origin and delivery of data
Why this is correct
Non-repudiation provides cryptographic proof of the origin and delivery of data, ensuring that a party cannot deny having sent or received a message. This is typically implemented with digital signatures and public key infrastructure (PKI), offering evidence for audits and legal proceedings. It ties an action to a specific entity with undeniable proof.
Confidentiality: Verifies the identity of a user
Why it's wrong here
This statement confuses confidentiality with authentication. Confidentiality is about protecting data from unauthorized disclosure, not about verifying identity. Identity verification is the purpose of authentication, which uses credentials or biometrics. Therefore, this pairing incorrectly assigns an authentication function to the confidentiality concept.
Integrity: Protects data from unauthorized disclosure
Why it's wrong here
This statement incorrectly pairs integrity with the unauthorized disclosure of data. Integrity is concerned with preventing unauthorized modification, tampering, or corruption of data, not with preventing disclosure. Unauthorized disclosure is a confidentiality issue, which focuses on data secrecy and access control. Thus, this option mixes up two distinct security objectives.
Go deeper
Learn chapter
Authentication Methods
Key term
Integrity
Integrity is the assurance that data has not been altered or tampered with in an unauthorized way, preserving its accuracy and consistency from source to destination.
Key term
Audit
An audit is a systematic, independent review of IT systems, processes, and controls to verify compliance with policies, standards, and regulations.
About these practice questions
One of 1,013 original SY0-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Match the security need to the best cryptographic solution.
easyWhy A: Confidentiality uses encryption; integrity uses hashes; authentication uses certificates; non-repudiation uses signatures; access control uses PKI; availability uses redundancy.
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.