220-1101 practice question 12 of 35
A technician just finished building a new PC and needs to install a firmware update for the system board UEFI . The technician is experiencing issues while accessing the USB key. Which of the following features should the technician most likely disable in order to complete this task?
Full set: 862 questionsSecure Boot is a UEFI security standard that ensures a device boots using only software trusted by the Original Equipment Manufacturer (OEM). It prevents unauthorized operating systems and software, such as rootkits, from loading during the boot process by verifying digital signatures. A firmware update utility on a USB key may not have a recognized digital signature, causing Secure Boot to block it from running. Disabling Secure Boot temporarily is a common and necessary step to allow the system to access and execute the unsigned utility from the USB drive to perform the firmware update.
A. TPM security: The Trusted Platform Module (TPM) is a hardware-based security chip used for cryptographic functions and secure key storage; it does not directly block the execution of a firmware update from a USB drive.
B. USB 3.0 support: Disabling USB 3.0 support is a troubleshooting step for compatibility issues with older USB 2.0 devices, not a security feature that would prevent access for a firmware update.
C. PXE boot capability: The Preboot Execution Environment (PXE) is used for booting a computer from a network interface. Disabling it has no effect on the system's ability to access a local USB drive. ---
1. Microsoft Corporation. (2023). Disabling Secure Boot. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/disabling-secure-boot. This document states, "Secure Boot... helps to make sure that your PC boots using only firmware that is trusted by the manufacturer... You might have to disable Secure Boot to run some PC graphics cards, hardware, or operating systems such as Linux or previous version of Windows." This principle extends to unsigned firmware update utilities.
2. Intel Corporation. (2023). Intel® Platform Innovation Framework for EFI: UEFI Specification Version 2.10. UEFI Forum. Section 32.1, "Overview," describes Secure Boot's role in authenticating code executed in the boot process. It authenticates images before execution, and an unsigned flashing utility would fail this authentication.
3. University of Michigan. (n.d.). Secure Boot and Your Computer. Safe Computing - University of Michigan. Retrieved from https://safecomputing.umich.edu/be-aware/personal-devices/secure-boot. The documentation explains, "Secure Boot is a security standard... to ensure that a device boots using only software that is trusted... It may be necessary to disable Secure Boot to boot from a CD/DVD or USB drive."
Keep practicing
Take the free 220-1101 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other 220-1101 practice questions
- Question 1A help desk technician needs to work on a high-volume printer. Users have reported occasi…
- Question 2A computer technician is investigating issues with a user's workstation. The user reports…
- Question 3A technician receives a call from a user about a new USB 3.1 docking station. The user cl…
- Question 4A user's smartphone loses its charge rapidly. The user also notices that the phone feels …
- Question 5Which of the following is most likely used to control door access?
- Question 6A remote user reports connectivity issues with the local internet provider. Even after a …
