Which of the following wraps the decryption key of a full disk encryption implementation and ties the hard disk drive to a particular device?

The correct answer is A. Trusted Platform Module (TPM). A Trusted Platform Module (TPM) is a hardware-based security feature that can be used to securely store cryptographic keys, such as the decryption key for full disk encryption (FDE). It provides a secure environment that is resistant to tampering and can bind the decryption key t

Submitted by packet_pusher· Mar 5, 2026Security Architecture and Engineering

Question

Options

ATrusted Platform Module (TPM)
BPreboot eXecution Environment (PXE)
CKey Distribution Center (KDC)
DSimple Key-Management for Internet Protocol (SKIP)

How the community answered

(36 responses)

A
89% (32)
B
3% (1)
C
6% (2)
D
3% (1)

Explanation

A Trusted Platform Module (TPM) is a hardware-based security feature that can be used to securely store cryptographic keys, such as the decryption key for full disk encryption (FDE). It provides a secure environment that is resistant to tampering and can bind the decryption key to the specific hardware of the device. This way, the decryption key is not stored in a way that can be easily extracted by an attacker, and the disk is tied to the particular device, ensuring that the data remains inaccessible if the device is moved to another machine.

Topics

#Full disk encryption#Trusted Platform Module (TPM)#Cryptographic key management

Community Discussion

No community discussion yet for this question.

Full CISSP Practice