In key management, the storage of a backup key with a third party is known as what?

In key management, the storage of a backup key with a third party is known as what?

• A. Escrow
• B. Hardware Security Module (HSM)
• C. Data at Rest
• D. Application Programming Interface (API)

Answer: (A)

Escrow is the practice of storing a backup cryptographic key with a trusted third party to enable recovery if the original holder loses access. This arrangement creates a safe recovery path and can include controls like dual custody and auditing to prevent misuse. The other options describe different things: an HSM is a secure hardware device used to protect and perform crypto operations, data at rest refers to data being stored in storage, and an API is a interface used to access services, not a storage solution. Escrow best matches the idea of keeping a backup key with a third party.

Escrow is the practice of storing a backup cryptographic key with a trusted third party to enable recovery if the original holder loses access. This arrangement creates a safe recovery path and can include controls like dual custody and auditing to prevent misuse. The other options describe different things: an HSM is a secure hardware device used to protect and perform crypto operations, data at rest refers to data being stored in storage, and an API is a interface used to access services, not a storage solution. Escrow best matches the idea of keeping a backup key with a third party.