Exam 220-1101 topic 1 question 156 discussion

The correct answer is A. TPM. A Trusted Platform Module (TPM) is a hardware component that provides cryptographic functions, such as generating and storing encryption keys. It's essential for securely storing the user's PIN and ensuring that the encrypted hard drive can only be accessed with the correct PIN. Here's a brief explanation of the other options: HSM (Hardware Security Module): While HSMs are highly secure devices often used for protecting cryptographic keys, they are typically used in enterprise environments and are not commonly found in laptops. UEFI (Unified Extensible Firmware Interface): UEFI is a modern firmware interface that replaces the traditional BIOS. It's important for booting the system but doesn't directly provide cryptographic functions. ARM: ARM is a type of processor architecture. It's not directly related to secure storage of PINs. Google Gemini

TPM - a chip that is embedded on the motherboard of a computer. It is designed to provide a secure environment for the storage of sensitive information such as passwords, encryption keys, and digital certificates.

TPM is a encrypted hard drive thing

To set up a laptop with an encrypted hard drive and securely store a PIN that the user will input at log-on, the following must be installed: A. TPM (Trusted Platform Module) A TPM is a hardware-based security feature that can securely store encryption keys and other sensitive data, such as the PIN mentioned in the scenario. It provides a secure environment for cryptographic operations and helps protect against unauthorized access to the encryption keys.

ARM is ( System on Chip ) CPU architecture that uses a passive cooling system ( fanless) commonly used in Apple hardware, most Android smartphones, and tablets, most Chromebooks, and some Windows phones and tablets. HSM ( Hardware Security Module ) uses a removable thumb drive or USB key to store cryptographic material. In order to access it - must know the password, and PIN to authenticate it - In the question, the laptop stores a secure PIN - not a removable device. Thus HSM can be eliminated. UEFI is a firmware used in the newer motherboard and supports 64-CPU. " UEFI-based systems provide built-in secure storage for cryptographic keys " - I do not think that it is the right answer." The TPM chip has a secure storage area that a disk encryption program such as Windows BitLocker can write its keys to" It looks like the answer is A However, TPM 2.0 requires UEFI to work so it could be confusing.