mediumMultiple ChoiceObjective-mapped
CAS-004 Practice Question: A company has implemented a hardware security…
A company has implemented a hardware security module (HSM) to manage cryptographic keys for a payment processing system. Which of the following best describes an advantage of using an HSM over software-based key storage?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Tamper-resistant key storage
HSMs are tamper-resistant devices that protect keys from physical and logical attacks, offering a higher level of security than software-based storage. While HSMs can be costly and may have slower key generation, their primary advantage is physical security.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Easier key rotation
Why it's wrong here
Key rotation complexity is similar; HSMs may even require additional procedures for secure rotation.
- ✓
Tamper-resistant key storage
Why this is correct
HSMs provide physical and logical protections to prevent key extraction and tampering.
- ✗
Faster cryptographic operations
Why it's wrong here
Software implementations can be faster due to direct CPU access; HSMs may introduce latency.
- ✗
Lower implementation cost
Why it's wrong here
HSMs are typically more expensive than software key storage due to dedicated hardware.
Go deeper
Related to this question
About these practice questions
One of 968 original CAS-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.