nerdexam
CompTIA

SY0-301 · Question #499

Which of the following is built into the hardware of most laptops but is not setup for centralized management by default?

The correct answer is B. TPM encryption. The Trusted Platform Module (TPM) is a hardware security chip embedded in most modern laptops that stores cryptographic keys but requires additional configuration for centralized enterprise management.

General security concepts

Question

Which of the following is built into the hardware of most laptops but is not setup for centralized management by default?

Options

  • AWhole disk encryption
  • BTPM encryption
  • CUSB encryption
  • DIndividual file encryption

How the community answered

(28 responses)
  • B
    89% (25)
  • C
    4% (1)
  • D
    7% (2)

Why each option

The Trusted Platform Module (TPM) is a hardware security chip embedded in most modern laptops that stores cryptographic keys but requires additional configuration for centralized enterprise management.

AWhole disk encryption

Whole disk encryption is a software-level feature such as BitLocker that may leverage the TPM chip but is itself not built into the hardware and is not enabled by default.

BTPM encryptionCorrect

TPM is a dedicated hardware chip built into the motherboard of most modern laptops that provides hardware-based cryptographic functions and secure key storage at the silicon level. While the chip is physically present by default, features such as remote attestation and centralized key management require explicit configuration through enterprise tools like group policy or Microsoft BitLocker Administration and Monitoring (MBAM), which are not enabled out of the box.

CUSB encryption

USB encryption refers to software or firmware solutions for encrypting USB drives and is not a hardware component built into laptop motherboards by default.

DIndividual file encryption

Individual file encryption such as EFS (Encrypting File System) is a software-based capability provided by the operating system and is not a hardware component in the laptop.

Concept tested: TPM hardware chip built-in but requiring centralized management configuration

Source: https://learn.microsoft.com/en-us/windows/security/hardware-security/tpm/trusted-platform-module-overview

Topics

#TPM#laptop hardware#centralized management#encryption

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice