SY0-301 · Question #580
A hospital IT department wanted to secure its doctor's tablets. The IT department wants operating system level security and the ability to secure the data from alteration. Which of the following metho
The correct answer is C. TPM. A TPM provides hardware-rooted security at the OS level, protecting cryptographic keys and ensuring data integrity so that stored data cannot be altered without detection.
Question
A hospital IT department wanted to secure its doctor's tablets. The IT department wants operating system level security and the ability to secure the data from alteration. Which of the following methods would MOST likely work?
Options
- ACloud storage
- BRemoval Media
- CTPM
- DWiping
How the community answered
(37 responses)- A3% (1)
- C95% (35)
- D3% (1)
Why each option
A TPM provides hardware-rooted security at the OS level, protecting cryptographic keys and ensuring data integrity so that stored data cannot be altered without detection.
Cloud storage addresses data availability and backup, not OS-level security or protection of data from alteration on the device itself.
Removable media is a storage transport mechanism and does not provide OS-level security controls or tamper protection for data on the tablet.
The Trusted Platform Module is a dedicated hardware chip that stores cryptographic keys, supports secure boot (ensuring the OS has not been tampered with), and enables full-disk encryption solutions such as BitLocker. This provides OS-level security by validating system integrity at startup and protects data from unauthorized alteration by binding encryption keys to the hardware state of the device.
Wiping is a data destruction method used when decommissioning a device - it removes data entirely rather than securing it from alteration during normal use.
Concept tested: TPM for OS-level hardware security and data integrity
Source: https://learn.microsoft.com/en-us/windows/security/hardware-security/tpm/trusted-platform-module-overview
Topics
Community Discussion
No community discussion yet for this question.