A company receives a shipment of network switches. The security team wants to ensure that the switches have not been tampered with during transit. Which control is most effective?

Check the serial numbers against the purchase order

Inspect the tamper-evident seals on the packaging

Update the firmware immediately

Test the switches on a isolated network

A technician needs to replace a failed hard drive in a server. The server's UEFI firmware is protected by a supervisor password. What is the correct procedure to avoid locking the system?

Clear the CMOS to reset the password

Enter the supervisor password to access firmware settings and disable Secure Boot temporarily

Replace the drive without accessing firmware settings

Use the user password to access firmware settings

Which practice is important during the decommissioning of hardware to prevent data leakage?

Reinstalling the operating system without erasing the disk

Passing the hardware to another department without documentation

Removing the device from the network without wiping data

Sanitizing all storage media before disposal or reuse

An organization is implementing a new authentication system for remote employees. They require a hardware factor that is phishing-resistant and does not require a central server to validate the user's credentials. Which solution best meets these requirements?

FIDO2 security keys with local authentication

Smart cards with a PKI infrastructure

OTP tokens with a RADIUS server

A financial institution needs to store the master key used to sign transactions. The key must never leave the hardware device, and operations using the key must be performed inside the device. Which solution meets this requirement?

A smart card for the administrator

A hardware security module (HSM)

LPI Security Essentials

Domain 3Objective 1

023.1 Hardware Security (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 7)

Part of the 023 Device and Storage Security domain, which makes up ~24% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

Questions 31–35

31application · medium
A company receives a shipment of network switches. The security team wants to ensure that the switches have not been tampered with during transit. Which control is most effective?
Select an answer first
32application · medium
A technician needs to replace a failed hard drive in a server. The server's UEFI firmware is protected by a supervisor password. What is the correct procedure to avoid locking the system?
Select an answer first
33foundation · easy
Which practice is important during the decommissioning of hardware to prevent data leakage?
Select an answer first
34expert · hard
An organization is implementing a new authentication system for remote employees. They require a hardware factor that is phishing-resistant and does not require a central server to validate the user's credentials. Which solution best meets these requirements?
Select an answer first
35application · medium
A financial institution needs to store the master key used to sign transactions. The key must never leave the hardware device, and operations using the key must be performed inside the device. Which solution meets this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.