Which of the following would be BEST to use to store customer keys?

A company publishes several APIs for customers and is required to use keys to segregate customer data sets.

Which of the following would be BEST to use to store customer keys?
A . A trusted platform module
B . A hardware security module
C . A localized key store
D . A public key infrastructure

View Answer

Answer: D

Explanation:

A public key infrastructure (PKI) is a system of certificates and keys that can provide encryption and authentication for APIs (application programming interfaces). A PKI can be used to store customer keys for accessing APIs and segregating customer data sets. A trusted platform module (TPM) is a hardware device that provides cryptographic functions and key storage, but it is not suitable for storing customer keys for APIs. A hardware security module (HSM) is similar to a TPM, but it is used for storing keys for applications, not for APIs. A localized key store is a software component that stores keys locally, but it is not as secure or scalable as a PKI.

Verified Reference:

https://www.comptia.org/blog/what-is-pki

https://partners.comptia.org/docs/default-source/resources/casp-content-guide