問題文
A regulator asks whether the master encryption key that protects a database can ever leave the appliance that holds it. The key was created with the hardware protection mode. What is the answer?
選択肢
- It can be exported from the appliance once the vault is replicated and every cryptographic operation that involves it is performed on the client side after that.
- It cannot be exported from the appliance while every cryptographic operation that involves it is performed by the calling service on its own host.
- It cannot be exported from the appliance and every cryptographic operation that involves it is performed inside that appliance.
- It can be exported from the appliance in a wrapped form and every operation that involves it happens inside it.