Which feature provides CPU hardware-level isolation and memory encryption on every endpoint?

• A. Secure Enclave
• B. Address Space Layout Randomization (ASLR)
• C. Local Drive Encryption
• D. NX Bit

Answer: (A)

Secure Enclave provides a separate, hardware-backed security environment built into the device’s CPU. It creates an isolated realm where cryptographic keys, biometric data, and other secrets are processed and stored, with memory within that enclave protected by encryption. This means sensitive operations happen away from the main operating system and regular memory, giving true hardware-level isolation and confidentiality on every endpoint.

ASLR is a software technique that randomizes where code and data live in memory to hinder certain exploits; it doesn’t establish hardware isolation or encrypt memory. Local Drive Encryption secures data at rest on storage, not the memory or CPU isolation during operation. The NX Bit marks some memory pages as non-executable to prevent certain attacks, but it doesn’t provide memory encryption or overall CPU-level isolation for secrets.