An administrator wants to ensure hard drives cannot be removed from hosts and men installed into and read by unauthorized hosts. Which of the following techniques would BEST support this?

The correct answer is A. Access control lists. TPM (Trusted Platform Module) with sealed storage (D) is the correct control for this threat. The TPM ties the encryption keys to specific hardware measurements (PCR values). If the drive is removed and inserted into a different host, the TPM on the new machine will not have…

Technical Integration of Enterprise Security

Question

Options

AAccess control lists
BTACACS+ server for AAA
CFile-level encryption
DTPM with sealed storage

How the community answered

(36 responses)

A
92% (33)
C
6% (2)
D
3% (1)

Explanation

TPM (Trusted Platform Module) with sealed storage (D) is the correct control for this threat. The TPM ties the encryption keys to specific hardware measurements (PCR values). If the drive is removed and inserted into a different host, the TPM on the new machine will not have the matching keys, so the data remains unreadable. Access Control Lists (A) are enforced by the operating system - once a drive is removed and mounted on another OS, ACLs are irrelevant. File-level encryption (C) can protect data but does not inherently bind keys to specific hardware. TACACS+ (B) handles authentication for network devices and does not address physical disk removal.

Topics

#TPM#full disk encryption#sealed storage#physical security

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice