Which Method Verifies Downloaded File Integrity?
Short answer
A Hashes
Question
Key Takeaways
The exam tests the distinction between integrity (hashes) and authenticity (certificates); the trap is choosing certificates because they relate to trust, not file modification.
Learn why posting file hashes is the correct way to allow users to verify downloaded file integrity, as confirmed by unanimous CompTIA SY0-701 exam community consensus.
Common mistake: The most common wrong answer is B. Certificates, because certificates establish identity/authenticity, but they do not directly verify that a file's content has not been altered; hashes provide that integrity check.
Expert Analysis
Why the Answer Is Correct
Hashes (A) are cryptographic digests that uniquely represent file content. As comment [1] explains, comparing the hash of the downloaded file with the developer's provided hash confirms the file has not been altered. Comment [2] also emphasizes that hashes are the standard mechanism for integrity verification, making A the clear and correct choice.
Why the Other Options Are Wrong
Certificates (B) are used for verifying the identity of the signer or authenticity, not file integrity; they would be relevant for digital signatures, but the question specifically asks about integrity. Algorithms (C) are the mathematical processes used to create hashes, not something a user compares against a downloaded file. Salting (D) is a technique for password hashing and does not apply to file integrity; adding salt to a file hash would actually break the verification process.
Community Comment Notes
Both high-vote comments unanimously select A, and their reasoning aligns with the exam objective of using cryptography to support security requirements. No comments suggest any alternative answer, confirming that hashes are the universally accepted approach for integrity verification in this scenario.
Official Reference
- https://www.rfc-editor.org/rfc/rfc6234
- https://csrc.nist.gov/pubs/sp/800-57/sp800-57pt1r5_final.pdf
- https://owasp.org/www-project-cheat-sheets/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html
These links open the official vendor documentation in a new tab.
Exam Strategy
When you see 'verify integrity of downloaded files,' immediately think of hashes. Remember that certificates and digital signatures are for authenticity, while hashes are for integrity; if a question mentions both, look for words like 'altered' or 'tampered' to choose hashes.
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
dbrowndiver 👍 3 Answered AHashes is the correct answer because they provide a straightforward and reliable method for verifying the integrity of downloaded files. By comparing the hash of a downloaded file with the hash provided on the website, users can ensure that the file has not been altered, confirming its integrity and authenticity.
-
Dlove 👍 2 Answered AA. Hashes Since hashes provide a way to verify that a file has not been altered by comparing the hash of the downloaded file with the hash provided by the developer, they are the correct choice.
-
Shaman73 👍 2 Answered AA. Hashes
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →