Study. uk . com
  1. Home
  2. All questions
  3. Question 219

CompTIA Security+ study material · question 219 of 611

What distinguishes a hardware security module from software key storage?

  1. It uses stronger algorithms
  2. It rotates keys automatically on a schedule
  3. It stores keys in plaintext for faster access
  4. It performs operations internally so the private key never appears in host memory
Show the answer

Answer: D. It performs operations internally so the private key never appears in host memory

Keeping the key inside tamper-resistant hardware means a compromised host still cannot extract it.

Source: OWASP Key Management Cheat Sheet (OWASP) — OWASP Key Management Cheat Sheet › Key Storage

Challenge yourself on this topic → Study as cards