An organization wants to make sure that their systems will only boot with approved operating systems and drivers. Which BIOS/UEFI setting should be enabled to ensure this requirement is met?
Secure Boot is a feature in the system's UEFI firmware that ensures that only software that is signed with a trusted certificate can be used to boot the system. It helps prevent malware from infecting the boot process which could happen if there were no checks on which software is allowed to execute. When Secure Boot is enabled, the system's firmware checks the signature of the boot loader, and if it is not recognized, the system will not boot. Disabling Legacy Boot or enabling TPM does not by itself provide the security measures that Secure Boot offers, as they are related to different functions. TPM is a hardware module that works with encryption, and Legacy Boot refers to the BIOS compatibility mode.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Secure Boot and how does it work?
Open an interactive chat with Bash
What is the difference between UEFI and Legacy Boot?