nerdexam
(ISC)2

CISSP · Question #176

Which of the following secure startup mechanisms are PRIMARILY designed to thwart attacks?

The correct answer is C. Side channel. Secure startup mechanisms such as Secure Boot and Trusted Platform Module (TPM) are primarily designed to thwart side channel attacks by protecting cryptographic keys and processes from being observed or inferred through indirect means.

Submitted by takeshi77· Mar 5, 2026Security Architecture and Engineering

Question

Which of the following secure startup mechanisms are PRIMARILY designed to thwart attacks?

Options

  • ATiming
  • BCold boot
  • CSide channel
  • DAcoustic cryptanalysis

How the community answered

(21 responses)
  • A
    5% (1)
  • C
    90% (19)
  • D
    5% (1)

Why each option

Secure startup mechanisms such as Secure Boot and Trusted Platform Module (TPM) are primarily designed to thwart side channel attacks by protecting cryptographic keys and processes from being observed or inferred through indirect means.

ATiming

Timing attacks are a subset of side channel attacks focused specifically on measuring execution time to infer secret data; they are not a distinct category of attack that secure startup mechanisms are primarily designed to address as a whole.

BCold boot

Cold boot attacks involve physically extracting encryption keys from RAM after a system is powered down or rebooted, and while memory encryption can mitigate this, secure startup mechanisms are not primarily designed to thwart cold boot attacks specifically.

CSide channelCorrect

Side channel attacks exploit information gained from the physical implementation of a cryptographic system - such as power consumption, electromagnetic emissions, or timing variations - rather than weaknesses in the algorithm itself. Secure startup mechanisms like TPM-based measured boot and Secure Boot are designed to protect against these attack vectors by ensuring integrity of the boot process and safeguarding cryptographic material from being exposed or inferred through physical observation channels.

DAcoustic cryptanalysis

Acoustic cryptanalysis involves extracting cryptographic keys by analyzing sound emissions from hardware components during computation, which is a highly specialized and exotic attack vector that secure startup mechanisms are not primarily designed to counter.

Concept tested: Secure startup mechanisms protecting against physical attack vectors

Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/system-security/secure-the-windows-10-boot-process

Topics

#side channel attacks#secure boot#trusted computing#system hardening

Community Discussion

No community discussion yet for this question.

Full CISSP Practice