nerdexam
Microsoft

MD-102 · Question #21

You have 10 computers that run Windows 7 and have the following configurations: - A single MBR disk - A disabled TPM chip - Disabled hardware virtualization - UEFI firmware running in BIOS mode…

The correct answer is A. Convert the MBR disk to a GPT disk E. Convert the firmware from BIOS to UEFI. Secure Boot is a UEFI security feature that ensures only trusted, signed bootloaders and OS components can run during startup. Two prerequisites must be met: (1) The firmware must be running in native UEFI mode - BIOS/legacy mode does not support Secure Boot, so converting…

Submitted by rachelw· Apr 18, 2026Prepare infrastructure for devices

Question

You have 10 computers that run Windows 7 and have the following configurations:

  • A single MBR disk
  • A disabled TPM chip
  • Disabled hardware virtualization
  • UEFI firmware running in BIOS mode
  • Enabled Data Execution Prevention (DEP)

You plan to upgrade the computers to Windows 10. You need to ensure that the computers can use Secure Boot. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • AConvert the MBR disk to a GPT disk
  • BEnable the TPM chip.
  • CDisable DEP
  • DEnable hardware virtualization
  • EConvert the firmware from BIOS to UEFI.

How the community answered

(55 responses)
  • A
    76% (42)
  • B
    15% (8)
  • C
    7% (4)
  • D
    2% (1)

Explanation

Secure Boot is a UEFI security feature that ensures only trusted, signed bootloaders and OS components can run during startup. Two prerequisites must be met: (1) The firmware must be running in native UEFI mode - BIOS/legacy mode does not support Secure Boot, so converting firmware from BIOS to UEFI mode (E) is required. (2) The system disk must use the GPT partition scheme - MBR disks are incompatible with UEFI Secure Boot, so converting the MBR disk to GPT (A) is required. Enabling TPM (B) is required for BitLocker and Windows Hello but not for Secure Boot. Disabling DEP (C) is irrelevant and counterproductive. Enabling hardware virtualization (D) is unrelated to Secure Boot.

Topics

#Secure Boot#GPT partitioning#UEFI firmware#Windows 10 upgrade

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice