Which of the following provides dedicated hardware-based cryptographic functions to an operating system and its applications running on laptops and desktops?

A.
TPM

B.
HSM

C.
CPU

D.
FPU

Explanation:
Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system’s motherboard and is enabled or disable in BIOS. It helps
with hash key generation and stores cryptographic keys, passwords, or certificates.
Incorrect Answers:
B: Hardware Security Module (HSM) hardware-based encryption solution that is usually used in conjunction with PKI to enhance security with certification
authorities (CAs). It is available as an expansion card and can cryptographic keys, passwords, or certificates. However, the HSM secures communication between
devices rather than the data on the device.
C: A Central Processing Unit (CPU) does not provide cryptographic functions.
D: A Floating-point Unit (FPU) is a math coprocessor designed to carry out operations on floating point numbers. IT does not provide cryptographic functions.

Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, pp 237, 238