Which credential stores authentication information such as a private key on a card-like device with an embedded processor, used for authentication?

Which credential stores authentication information such as a private key on a card-like device with an embedded processor, used for authentication?

• A. Biometric authentication
• B. Smart cards
• C. Passwordless
• D. Soft authentication token

Answer: (B)

The key idea being tested is secure credential storage on a physical, tamper-resistant device. A smart card is exactly that: a card-like object with an embedded microprocessor and secure memory that can store a private key and related credentials. The device can perform cryptographic operations—like signing a challenge or decrypting data—inside the card, so the private key never leaves the card. This provides strong authentication by proving possession of the card and the ability to use the stored credential, without exposing sensitive material to the host system. Biometric authentication focuses on verifying identity through physical traits rather than storing and using cryptographic keys on a hardware card. Passwordless refers to reducing or eliminating passwords in the flow, often using different kinds of hardware or software authenticators, but not specifically describing a card with an embedded processor. A soft authentication token is software-based and stored on a device, lacking the dedicated secure hardware and protective storage of a smart card.

The key idea being tested is secure credential storage on a physical, tamper-resistant device. A smart card is exactly that: a card-like object with an embedded microprocessor and secure memory that can store a private key and related credentials. The device can perform cryptographic operations—like signing a challenge or decrypting data—inside the card, so the private key never leaves the card. This provides strong authentication by proving possession of the card and the ability to use the stored credential, without exposing sensitive material to the host system.

Biometric authentication focuses on verifying identity through physical traits rather than storing and using cryptographic keys on a hardware card. Passwordless refers to reducing or eliminating passwords in the flow, often using different kinds of hardware or software authenticators, but not specifically describing a card with an embedded processor. A soft authentication token is software-based and stored on a device, lacking the dedicated secure hardware and protective storage of a smart card.