Which of the following provides dedicated hardware-based cryptographic functions to an operating
system and its applications running on laptops and desktops?

A.
TPM

B.
HSM

C.
CPU

D.
FPU

Explanation:
Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the
system’s motherboard and is enabled or disable in BIOS. It helps with hash key generation and stores
cryptographic keys, passwords, or certificates.
Incorrect Answers:B: Hardware Security Module (HSM) hardware-based encryption solution that is usually used in
conjunction with PKI to enhance security with certification authorities (CAs). It is available as an expansion
card and can cryptographic keys, passwords, or certificates. However, the HSM secures communication
between devices rather than the data on the device.
C: A Central Processing Unit (CPU) does not provide cryptographic functions.
D: A Floating-point Unit (FPU) is a math coprocessor designed to carry out operations on floating point
numbers. IT does not provide cryptographic functions.

Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis,
2014, pp. 237, 238