Developers have been creating and managing cryptographic material on their personal laptops fix use in production environment. A security engineer needs to initiate a more secure process. Which of…

The correct answer is D. Managing key material on a HSM. Managing key material on a Hardware Security Module (HSM) is the best strategy to secure cryptographic material. HSMs are specialized devices designed to generate, store, and manage cryptographic keys securely. By using an HSM, the security engineer can ensure that…

Submitted by anjalisingh· Mar 6, 2026Security Engineering

Question

Developers have been creating and managing cryptographic material on their personal laptops fix use in production environment. A security engineer needs to initiate a more secure process. Which of the following is the best strategy for the engineer to use?

Options

ADisabling the BIOS and moving to UEFI
BManaging secrets on the vTPM hardware
CEmploying shielding lo prevent LMI
DManaging key material on a HSM

How the community answered

(50 responses)

A
2% (1)
B
10% (5)
C
4% (2)
D
84% (42)

Explanation

Managing key material on a Hardware Security Module (HSM) is the best strategy to secure cryptographic material. HSMs are specialized devices designed to generate, store, and manage cryptographic keys securely. By using an HSM, the security engineer can ensure that cryptographic keys are protected in a secure, tamper-resistant environment, rather than being stored on developers' personal laptops where they are more vulnerable to theft or mishandling.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice