nerdexam
CompTIA

SY0-501 · Question #317

Which of the following would enhance the security of accessing data stored in the cloud? (Select TWO)

The correct answer is B. SAML authentication D. Multifactor authentication. This question identifies authentication mechanisms that directly enhance the security of user access to cloud-stored data.

Submitted by kavita_s· Mar 4, 2026Security architecture

Question

Which of the following would enhance the security of accessing data stored in the cloud? (Select TWO)

Options

  • ABlock level encryption
  • BSAML authentication
  • CTransport encryption
  • DMultifactor authentication
  • EPredefined challenge questions
  • FHashing

How the community answered

(41 responses)
  • A
    15% (6)
  • B
    71% (29)
  • C
    7% (3)
  • E
    2% (1)
  • F
    5% (2)

Why each option

This question identifies authentication mechanisms that directly enhance the security of user access to cloud-stored data.

ABlock level encryption

Block level encryption secures data at rest on storage volumes, protecting it from unauthorized physical storage access, but does not directly enhance the security of the user's authentication process for accessing that data.

BSAML authenticationCorrect

SAML (Security Assertion Markup Language) authentication enhances access security by enabling federated identity and single sign-on (SSO), allowing organizations to leverage a trusted identity provider for centralized and consistent authentication to cloud services.

CTransport encryption

Transport encryption secures data in transit over a network, protecting it from interception during transmission, but it does not enhance the security of the user authentication mechanism itself.

DMultifactor authenticationCorrect

Multifactor authentication (MFA) significantly strengthens access security by requiring users to provide two or more distinct forms of verification (e.g., password and a mobile app code) to gain access, making it much harder for unauthorized users to compromise an account.

EPredefined challenge questions

Predefined challenge questions are a weaker form of authentication, often susceptible to social engineering or guessing, and thus do not provide a significant enhancement to access security compared to stronger authentication factors.

FHashing

Hashing is primarily used for data integrity verification or for securely storing passwords (one-way encryption of the password itself), not as a direct method for a user to authenticate and gain access to data.

Concept tested: Cloud Identity and Access Management (IAM) security features

Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Topics

#cloud security#SAML#multifactor authentication#access control

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice