Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Key Escrow (A) Ensures encryption keys are securely stored and recoverable (e.g., in case an employee leaves or forgets a password). Prevents data loss if credentials are lost. TPM Presence (B) A Trusted Platform Module (TPM) chip: Securely stores encryption keys. Enables hardware-based encryption (e.g., BitLocker, FileVault). Protects against offline attacks (e.g., removing the disk to bypass login). Why the Others Are Less Relevant to FDE: C. Digital signatures → Used for code/email integrity, not disk encryption. D. Data tokenization → Replaces sensitive data with tokens (useful for databases, not FDE). E. Public key management → More relevant for asymmetric encryption (e.g., SSL/TLS). F. Certificate authority linking → Tied to PKI, not FDE deployment.
In the planning process, finding a safe place for the encryption key is the most important. Key escrow is a software-based, and TPM is a hardware-based system where we can keep the encryption key for future decryptions. Other options are not relevant in the planning process of FDE.
AB for sure. Here is why E is not one of them (ai generated, but I agree with the answer) Public key management is essential in many cryptographic processes, but it's not as directly relevant to Full Disk Encryption (FDE) for the following reasons: FDE primarily uses symmetric encryption: Most FDE solutions rely on symmetric encryption, where the same key is used to both encrypt and decrypt the data. This differs from public key infrastructure (PKI), which involves asymmetric encryption, where a public key encrypts and a private key decrypts. While PKI is critical in other areas (like securing communications, emails, or verifying identities), it's not central to how FDE typically functions. Public key management is more relevant for data in transit: PKI and public key management are often used for securing data in transit (e.g., SSL/TLS for web traffic) or ensuring non-repudiation (via digital signatures). FDE is focused on securing data at rest, where symmetric keys (often stored in TPM) are used for encryption, not public/private key pairs.