Exam CS0-002 topic 1 question 154 discussion

D is correct. There is a large two part series out there on the theft of intellectual property on FPGA's, so that is a real thing and big deal it seems "https://www.eetimes.com/how-to-protect-intellectual-property-in-fpgas-devices-part-1/"

D. FPGA applications are easily cloned, increasing the possibility of intellectual property theft. The main concern for a security analyst in this scenario is the potential for intellectual property theft. FPGAs (Field-Programmable Gate Arrays) are reprogrammable devices that can be configured for specific applications. If the development phases involve sharing FPGA designs or configurations between the small electronics company and the contractor's labs, there is a risk that the intellectual property associated with the FPGA-based device could be copied or stolen.

Concern of a security analyst. A security analyst concern should be doing his job properly, and option B is his concern. Intellectual property should be the concern of another department. If the question was "Which should be the company´s concern" then D. But the company accepted the risk of intellectual property leak and you have to do your task as a security analyst. It is not your business intelectual property or health and safety conditions.

D. is correct

i'm glad i guessed correctly, i couldn't remember this answer, but guessed D, passed today

Below article is from CompTIA official guide Anti-Tamper If an attacker can steal the hardware, TPMs and HSMs are vulnerable to physical attacks against the chips to extract the keys. Anti-tamper solutions are designed to mitigate this risk. An anti-tamper mechanism makes use of a type of programmable controller called a field programmable gate array (FPGA) and a physically unclonable function (PUF). The PUF generates a digital fingerprint based on unique features of the device. This means that tampering, by removing the chip or adding an unknown input/ output mechanism for instance, can be detected and a remedial action, such as zerofilling cryptographic keys, can be performed automatically.

Is FPGA a new crypto coin? Fungible Payment in Gold Allowance?

looks good to me

Only D directly concerns a security analyst.

Several CYSA+ (002) test preps I used show the answer as B. Reference: https://www.certification-questions.com/pdf-download/comptia/cs0-002-pdf.pdf

D is correct

D seems to be correct but B might also be a correct answer. Any other thoughts?