CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ74

VerifiedAsset Security

A security architect is designing and deploying an internal certification authority to create digital certificates for every employee. Which of the following is the BEST solution for securely storing the private keys?

Explanation

A Trusted Platform Module (TPM) provides hardware-backed protection for cryptographic private keys. It can generate keys that remain isolated and nonexportable, reducing exposure to operating-system and software compromise. A PKI manages certificates and trust relationships but is not itself a private-key storage mechanism. Microsoft Learn: TPM fundamentals

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!