nerdexam
CompTIA

220-801 · Question #14

When a user's computer boots, a message shows that reads: "Alert! Cover previously removed." Which of the following was configured in the BIOS to cause this alert?

The correct answer is C. Intrusion detection. BIOS intrusion detection is a security feature that monitors whether the computer chassis cover has been physically opened and alerts the user on next boot.

Hardware

Question

When a user's computer boots, a message shows that reads: "Alert! Cover previously removed." Which of the following was configured in the BIOS to cause this alert?

Options

  • ABoot sequence
  • BDate/time clock settings
  • CIntrusion detection
  • DVirtualization support

How the community answered

(64 responses)
  • A
    3% (2)
  • B
    2% (1)
  • C
    94% (60)
  • D
    2% (1)

Why each option

BIOS intrusion detection is a security feature that monitors whether the computer chassis cover has been physically opened and alerts the user on next boot.

ABoot sequence

Boot sequence settings control the order in which devices are checked for a bootable OS and have no relationship to physical case access.

BDate/time clock settings

Date and time clock settings configure the system RTC and do not interact with physical sensors on the chassis.

CIntrusion detectionCorrect

Intrusion detection in BIOS/UEFI uses a physical chassis intrusion sensor (a small contact switch on the case) that registers when the cover is removed. When enabled, the BIOS stores this event and displays a chassis intrusion alert on the next POST. This feature is designed to detect unauthorized physical access to the system.

DVirtualization support

Virtualization support enables hardware-assisted virtualization (Intel VT-x or AMD-V) for running virtual machines and is unrelated to chassis intrusion.

Concept tested: BIOS chassis intrusion detection feature

Source: https://learn.microsoft.com/en-us/windows-hardware/drivers/bringup/security-overview

Topics

#BIOS#intrusion detection#chassis intrusion#security settings

Community Discussion

No community discussion yet for this question.

Full 220-801 Practice