3.4 - Understand Security Capabilities of Information Systems (IS) (e.g., Memory Protection, Trusted Platform Module (TPM), Encryption/decryption) CISSP Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A mobile banking app processes a user's PIN and biometric data to authenticate a transaction. The security architect is concerned about the main mobile OS being compromised and wants to ensure that the PIN and biometric comparison occur in an isolated environment that the OS cannot access. Which technology is specifically designed for this purpose on mobile devices?

   • AA virtual private network (VPN) for all network traffic.
   • BFull disk encryption (FDE) on the mobile device.
   • CA Trusted Execution Environment (TEE) such as ARM TrustZone.
   • DA mobile device management (MDM) policy that enforces a strong lock screen.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   In which scenario is key recovery most critical?

   • AWhen data is transmitted over a network
   • BWhen a new encryption algorithm is adopted
   • CWhen a system is rebooted
   • DWhen an employee leaves the company and their encrypted files need to be accessed
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A certificate authority (CA) needs to sign thousands of digital certificates per day. The CA's private key must be protected from compromise, and signing operations must be performed without the private key ever leaving the protected environment. Which technology should the CA use to perform these signing operations?

   • AA Hardware Security Module (HSM) configured to perform the signing operation internally.
   • BA software-based key store encrypted with a passphrase on the CA server.
   • CA Trusted Platform Module (TPM) on the CA server.
   • DA smart card held by the CA administrator.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is the primary function of a Trusted Platform Module (TPM) regarding cryptographic keys?

   • ASecurely store cryptographic keys in tamper-resistant hardware
   • BProvide a firewall to protect the system from network attacks
   • CEncrypt all data stored on the hard drive
   • DAct as a central processing unit for the computer
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which state of data is protected by encryption when it is stored on a hard drive or in a database?

   • AData in use
   • BData in transit
   • CData in the cloud
   • DData at rest
   Reveal Solution Discussion Select an answer first