Which of the following items must a TA protect from theft, loss or unauthorized access?

• A. Computer equipment, software and supplies
• B. Cryptographic modules
• C. Tokens
• D. All of the above

Answer: (D)

Protecting every asset that enables security operations is essential. Computer equipment, software, and supplies can store, run, or reveal sensitive data and configurations if stolen or accessed by someone unauthorized. Cryptographic modules hold keys and perform encryption and decryption; if they are compromised, keys can be exposed or operations tampered with, breaking confidentiality and integrity. Tokens carry credentials or keys used for authentication; losing or stealing them could let an attacker impersonate users and gain unauthorized access. Because each category supports the security of the system and its operations, the TA must protect all of them from theft, loss, or unauthorized access.