Examkin

Question

Difficulty: MediumHardware and Embedded Systems Security

A logistics company is deploying telemetry edge devices on freight vehicles. To protect against unauthorized firmware tampering, the systems engineer must guarantee that the microcontroller only executes cryptographically signed boot code during power-on. Which hardware security control serves as the immutable foundation to perform this initial integrity verification?

  1. A hardware Root of Trust (RoT) embedded within read-only memory (ROM) on the system-on-chipAnswer
  2. B
    An inline firewall enforcing network microsegmentation and deep packet inspection
  3. C
    A software-based integrity hash table stored in external SPI flash memory
  4. D
    A symmetric encryption key stored unprotected in dynamic system RAM

Answer

A hardware Root of Trust (RoT) embedded within read-only memory (ROM) on the system-on-chip
A hardware Root of Trust (RoT) stored in immutable ROM on the system-on-chip provides the essential cryptographic anchor. Because code stored in ROM cannot be altered after manufacture, it reliably verifies the digital signature of the initial bootloader before execution, establishing a secure chain of trust.

Step-by-Step Solution

1
Identify the primary requirement
The scenario requires an immutable hardware-based anchor to verify cryptographic signatures of boot code at power-on.
Preventing unauthorized firmware execution requires an unalterable trust foundation prior to running any soft code.
2
Evaluate hardware vs software security controls
Software-based storage in flash memory or network filtering can be bypassed or overwritten, whereas hardware ROM cannot be modified after manufacturing.
An immutable foundation must exist in read-only hardware to validate subsequent stages in the secure boot chain.

Key Concept

Hardware Root of Trust and Secure Boot
Rate this question

Topics

Hardware and Embedded Systems Security

More questions from this topic