Which Method Verifies Downloaded File Integrity?
A software developer released a new application and is distributing application files via the developer's website. Which of the following should the developer post on the website to allow users to verify the integrity of the downloaded files?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests the distinction between integrity (hashes) and authenticity (certificates); the trap is choosing certificates because they relate to trust, not file modification.
Learn why posting file hashes is the correct way to allow users to verify downloaded file integrity, as confirmed by unanimous CompTIA SY0-701 exam community consensus.
The most common wrong answer is B. Certificates, because certificates establish identity/authenticity, but they do not directly verify that a file's content has not been altered; hashes provide that integrity check.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Hashes (A) are cryptographic digests that uniquely represent file content. As comment [1] explains, comparing the hash of the downloaded file with the developer's provided hash confirms the file has not been altered. Comment [2] also emphasizes that hashes are the standard mechanism for integrity verification, making A the clear and correct choice.Why the Other Options Are Wrong
Certificates (B) are used for verifying the identity of the signer or authenticity, not file integrity; they would be relevant for digital signatures, but the question specifically asks about integrity. Algorithms (C) are the mathematical processes used to create hashes, not something a user compares against a downloaded file. Salting (D) is a technique for password hashing and does not apply to file integrity; adding salt to a file hash would actually break the verification process.Community Comment Notes
Both high-vote comments unanimously select A, and their reasoning aligns with the exam objective of using cryptography to support security requirements. No comments suggest any alternative answer, confirming that hashes are the universally accepted approach for integrity verification in this scenario.Official Reference
Exam Strategy
When you see 'verify integrity of downloaded files,' immediately think of hashes. Remember that certificates and digital signatures are for authenticity, while hashes are for integrity; if a question mentions both, look for words like 'altered' or 'tampered' to choose hashes.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →