CCSP · Question #213
Which key storage solution would be the BEST choice in a situation where availability might be of a particular concern?
The correct answer is A. Internal. For high availability of cryptographic keys, an internal key storage solution, such as a Hardware Security Module (HSM) directly controlled by the organization, is often preferred for immediate access and control.
Question
Which key storage solution would be the BEST choice in a situation where availability might be of a particular concern?
Options
- AInternal
- BExternal
- CHosted
- DEmbedded
How the community answered
(33 responses)- A85% (28)
- B6% (2)
- C6% (2)
- D3% (1)
Why each option
For high availability of cryptographic keys, an internal key storage solution, such as a Hardware Security Module (HSM) directly controlled by the organization, is often preferred for immediate access and control.
Internal key storage solutions, such as on-premises Hardware Security Modules (HSMs) or key vaults directly managed by the organization, offer maximum control over availability and immediate access, reducing reliance on external providers.
External key storage, while potentially secure, introduces dependencies on external services and networks, which could impact availability.
Hosted key storage (e.g., cloud-based key management services) relies on a third-party provider's infrastructure, which might introduce latency or external dependencies that affect immediate availability, depending on the service level agreement.
Embedded key storage typically refers to keys stored directly within an application or device, which might offer local availability but usually lacks the robust fault tolerance and management features needed for high-availability enterprise solutions.
Concept tested: Key management solutions, availability considerations
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/key-management-overview
Topics
Community Discussion
No community discussion yet for this question.