Which statement about tampering in FIPS 140-2 is accurate?

• A. Tampering erases all critical security information
• B. Tampering never affects data
• C. Tampering triggers alarm but preserves data
• D. Tampering is not addressed

Answer: (A)

Tamper protection in FIPS 140-2 is about detecting physical intrusion and responding by removing sensitive material from the module. When tampering is detected, the cryptographic module must erase or zeroize critical security information—like keys and other secrets—to prevent their exposure. This tamper response priority ensures that even if someone gains physical access, they cannot recover cryptographic material. That’s why this statement is the best fit: it captures the essential safeguard that tampering triggers an action to eliminate sensitive data, rather than merely warning or leaving data in place.

The other ideas don’t fit because tampering can affect data security by erasing it or preventing its leakage, not by leaving data untouched; and tampering is explicitly addressed in the standard through defined response measures, not ignored.