What is the primary purpose of setting a BIOS/UEFI password?

To prevent unauthorized users from changing firmware settings

A company is choosing between an HSM and a TPM for protecting the private key used to sign software updates. The key must be available to multiple servers for signing, and the signing operation must be performed in hardware. Which solution is more appropriate?

A smart card on a signing server

What is the recommended practice for disposing of a hard drive that contains sensitive data?

Leaving the drive in the device for resale

Degaussing or physically destroying the drive

A security researcher is analyzing a smart card used for building access. They suspect that the card's cryptographic operations can be observed by measuring the power consumption of the card reader. Which type of attack is this?

Power analysis side-channel attack

A company wants to ensure that a server's firmware and bootloader have not been modified since the last known-good state. Which TPM feature should be used?

Platform integrity measurement and attestation

LPI Security Essentials

Domain 3Objective 1

023.1 Hardware Security (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 5)

Part of the 023 Device and Storage Security domain, which makes up ~24% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

Questions 21–25

21foundation · easy
What is the primary purpose of setting a BIOS/UEFI password?
Select an answer first
22expert · hard
A company is choosing between an HSM and a TPM for protecting the private key used to sign software updates. The key must be available to multiple servers for signing, and the signing operation must be performed in hardware. Which solution is more appropriate?
Select an answer first
23foundation · easy
What is the recommended practice for disposing of a hard drive that contains sensitive data?
Select an answer first
24application · medium
A security researcher is analyzing a smart card used for building access. They suspect that the card's cryptographic operations can be observed by measuring the power consumption of the card reader. Which type of attack is this?
Select an answer first
25application · medium
A company wants to ensure that a server's firmware and bootloader have not been modified since the last known-good state. Which TPM feature should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.