What piece of hardware on a computer's motherboard generates encryption keys and only releases a part of the key so that decrypting a disk on a new piece of hardware is not possible?

Question

Options

• ACPU
• BGPU
• CUEFI
• DTPM

• A
  3% (1)
• C
  3% (1)
• D
  94% (29)

Explanation

TPM (Trusted Platform Module) is a dedicated security chip soldered onto the motherboard that generates, stores, and manages cryptographic keys. It works by only releasing a portion of the encryption key, meaning that if a protected hard drive is moved to a different machine, the TPM on that new machine cannot reconstruct the full key, rendering the data inaccessible - this is exactly how technologies like BitLocker work.

Why the distractors are wrong:

• A (CPU): The processor handles general computation but does not store or manage encryption keys in a hardware-secured way.
• B (GPU): The graphics processing unit renders images and handles parallel processing tasks; it has no role in key generation or storage.
• C (UEFI): UEFI is firmware that initializes hardware at boot; while it interacts with the TPM, it is not the component that generates and guards the keys.

Memory tip: Think of the TPM as a "Trusty Personal Minder" - it guards your keys and refuses to hand them over to anyone it doesn't recognize (i.e., a new or different piece of hardware).

No community discussion yet for this question.