312-50V12 Question #140: Real Exam Question with Answer & Explanation

Question

What piece of hardware on a computer's motherboard generates encryption keys and only releases a part of the key so that decrypting a disk on a new piece of hardware is not possible?

Options

• ACPU
• BUEFI
• CGPU
• DTPM

Explanation

The TPM (Trusted Platform Module) is a dedicated hardware chip on the motherboard that generates, stores, and manages cryptographic keys, ensuring encrypted drives cannot be decrypted on different hardware.

Common mistakes.

• A. The CPU is a general-purpose processing unit responsible for executing instructions; it does not have dedicated hardware storage for generating and binding encryption keys to a specific machine.
• B. UEFI is firmware that initializes hardware during boot and can interact with the TPM, but it is not itself the hardware component that generates and stores encryption keys.
• C. The GPU is a graphics processing unit designed for rendering and parallel computation; it has no role in generating or storing motherboard-bound encryption keys for disk encryption.

Concept tested. TPM hardware role in disk encryption key management

Reference. https://learn.microsoft.com/en-us/windows/security/hardware-security/tpm/trusted-platform-module-overview

No community discussion yet for this question.