Exercise 2: Secure Enclave/T2 vs. TPM — Possible Solution ==================================================================== WHAT THEY HAVE IN COMMON ------------------------------ Per this chapter, both Touch ID's Secure Enclave (or T2 chip on older Intel Macs) and Windows 11 Fundamentals 4's TPM-bound Windows Hello PINs exist to keep biometric or credential material stored inside a dedicated, isolated piece of hardware, rather than in ordinary system storage or memory where it could be more easily extracted. In both cases, sensitive authentication data never leaves that dedicated hardware region during normal use - fingerprint data is never stored as a raw image, and Windows Hello PIN data is likewise bound to the TPM rather than existing as a plain, portable credential. WHAT SPECIFICALLY DIFFERS ------------------------------ The two named hardware components are different: on the Mac side, it's the Secure Enclave built into Apple Silicon chips, or the separate T2 chip on older Intel Macs; on the Windows 11 side, it's the TPM (Trusted Platform Module) chip. They come from different vendors, use different names and implementations, and aren't interchangeable or compatible with each other - but they're solving the identical underlying problem in each ecosystem. WHY THIS WORKS AS AN ANSWER ------------------------------ It correctly identifies the shared underlying goal (keeping biometric/credential material in dedicated, isolated hardware) as the commonality, and correctly names both hardware components (Secure Enclave/T2 chip vs. TPM) as the specific difference, rather than treating them as identical technology under different names.