A security engineer is implementing security measures on new hardware in preparation for its launch. During the development phase, a risk related to protections at the UEFI level was found. Which of…

The correct answer is B. Enabling Secure Boot. Enabling Secure Boot at the UEFI level helps ensure that only trusted and signed operating system loaders and boot files can be executed on the hardware. This prevents unauthorized code, such as bootkits or rootkits, from loading during the boot process, significantly reducing…

Submitted by ricky.ec· Mar 6, 2026Security Engineering

Question

A security engineer is implementing security measures on new hardware in preparation for its launch. During the development phase, a risk related to protections at the UEFI level was found. Which of the following should the engineer recommend to reduce this risk?

Options

AConfiguring paravirtualization protection
BEnabling Secure Boot
CInstalling cryptography at the operational system level
DImplementing hardware root of trust

How the community answered

(59 responses)

A
12% (7)
B
80% (47)
C
3% (2)
D
5% (3)

Explanation

Enabling Secure Boot at the UEFI level helps ensure that only trusted and signed operating system loaders and boot files can be executed on the hardware. This prevents unauthorized code, such as bootkits or rootkits, from loading during the boot process, significantly reducing risks at the UEFI level. Secure Boot is an essential measure to ensure the integrity of the system from the very start of the boot process.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice