220-1101 practice question 12 of 35

A technician just finished building a new PC and needs to install a firmware update for the system board UEFI . The technician is experiencing issues while accessing the USB key. Which of the following features should the technician most likely disable in order to complete this task?

Full set: 862 questions
Answer options
A: TPM security
B: USB 3.0 support
C: PXE boot capability
D: Secure Boot Correct answer
Correct Answer:
D. Secure Boot
Explanation

Secure Boot is a UEFI security standard that ensures a device boots using only software trusted by the Original Equipment Manufacturer (OEM). It prevents unauthorized operating systems and software, such as rootkits, from loading during the boot process by verifying digital signatures. A firmware update utility on a USB key may not have a recognized digital signature, causing Secure Boot to block it from running. Disabling Secure Boot temporarily is a common and necessary step to allow the system to access and execute the unsigned utility from the USB drive to perform the firmware update.

Why Incorrect

A. TPM security: The Trusted Platform Module (TPM) is a hardware-based security chip used for cryptographic functions and secure key storage; it does not directly block the execution of a firmware update from a USB drive.
B. USB 3.0 support: Disabling USB 3.0 support is a troubleshooting step for compatibility issues with older USB 2.0 devices, not a security feature that would prevent access for a firmware update.
C. PXE boot capability: The Preboot Execution Environment (PXE) is used for booting a computer from a network interface. Disabling it has no effect on the system's ability to access a local USB drive. ---

References

1. Microsoft Corporation. (2023). Disabling Secure Boot. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/disabling-secure-boot. This document states, "Secure Boot... helps to make sure that your PC boots using only firmware that is trusted by the manufacturer... You might have to disable Secure Boot to run some PC graphics cards, hardware, or operating systems such as Linux or previous version of Windows." This principle extends to unsigned firmware update utilities.

2. Intel Corporation. (2023). Intel® Platform Innovation Framework for EFI: UEFI Specification Version 2.10. UEFI Forum. Section 32.1, "Overview," describes Secure Boot's role in authenticating code executed in the boot process. It authenticates images before execution, and an unsigned flashing utility would fail this authentication.

3. University of Michigan. (n.d.). Secure Boot and Your Computer. Safe Computing - University of Michigan. Retrieved from https://safecomputing.umich.edu/be-aware/personal-devices/secure-boot. The documentation explains, "Secure Boot is a security standard... to ensure that a device boots using only software that is trusted... It may be necessary to disable Secure Boot to boot from a CD/DVD or USB drive."

Scroll to Top