CSSLP · Question #393
Which processor security feature provides hardware based encryption of system memory to protect sensitive information from physical memory extraction?
The correct answer is B. AMD Secure Memory Encryption (SME). AMD Secure Memory Encryption (SME) is a processor security feature that provides hardware-based encryption of system memory to protect sensitive information from physical memory extraction attacks.
Question
Which processor security feature provides hardware based encryption of system memory to protect sensitive information from physical memory extraction?
Options
- ARole Based Access Control (RBAC)
- BAMD Secure Memory Encryption (SME)
- CSoftware Guard Extensions (SGX)
- DSeparation Kernel Protection Profiles (SKPP)
How the community answered
(45 responses)- A4% (2)
- B93% (42)
- C2% (1)
Why each option
AMD Secure Memory Encryption (SME) is a processor security feature that provides hardware-based encryption of system memory to protect sensitive information from physical memory extraction attacks.
Role Based Access Control (RBAC) is a software-based access control mechanism that restricts system access to authorized users based on their roles, not a hardware feature for memory encryption.
AMD Secure Memory Encryption (SME), and its newer variant Secure Encrypted Virtualization (SEV), are processor features that encrypt all or part of system memory using hardware-based keys. This protects data in memory from unauthorized access, such as physical memory extraction attacks or snooping, even if the OS or hypervisor is compromised.
Software Guard Extensions (SGX) is an Intel technology that allows applications to create protected enclaves in memory for secure code and data execution, but it's focused on protecting specific application code/data, not the entire system memory from physical extraction.
Separation Kernel Protection Profiles (SKPP) are security certification standards for high-assurance operating systems and hypervisors, not a specific processor security feature for memory encryption.
Concept tested: Processor memory encryption features
Source: https://www.amd.com/en/developer/system/confidential-computing.html
Topics
Community Discussion
No community discussion yet for this question.