StudyToCert

All certifications / Security+ / Lessons

CompTIA Security+ SY0-701 · Domain 3: Security architecture

Protection: encryption, hashing, masking, tokenization, DLP

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Once you know what data you have and how sensitive it is, you choose methods to protect it. Security+ lists several data protection methods: encryption, hashing, masking, tokenization, obfuscation, segmentation, permission restrictions and geographic restrictions, along with data loss prevention (DLP) tools that watch data as it moves. Each method protects data in a different way, and exam questions often describe a requirement and ask which method fits best. The deciding questions are usually: must the original data be recoverable, by whom, and where does it need to be usable?

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Security+ for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Security+ study plan