nerdexam
CompTIA

SK0-004 · Question #801

A technician wants to disable USB ports on the server to prevent booting from a flash drive. Which of the following actions should the technician take to accomplish this task?

The correct answer is A. Disable the USB ports on BIOS setup. Preventing USB boot requires action at the firmware level, because the boot process occurs before the operating system loads. Only BIOS/UEFI setup can enforce hardware-level USB boot restrictions.

Security and disaster recovery

Question

A technician wants to disable USB ports on the server to prevent booting from a flash drive. Which of the following actions should the technician take to accomplish this task?

Options

  • ADisable the USB ports on BIOS setup
  • BDisable the USB ports on Device Manager
  • CDisable the USB ports on Control Panel
  • DDisable the USB ports on UAC

How the community answered

(32 responses)
  • A
    88% (28)
  • B
    3% (1)
  • C
    3% (1)
  • D
    6% (2)

Why each option

Preventing USB boot requires action at the firmware level, because the boot process occurs before the operating system loads. Only BIOS/UEFI setup can enforce hardware-level USB boot restrictions.

ADisable the USB ports on BIOS setupCorrect

BIOS/UEFI firmware controls hardware initialization and the boot device sequence before any operating system is loaded, making it the only layer capable of preventing USB boot media from being recognized. Disabling USB ports or removing USB from the boot order in BIOS setup is enforced at the hardware level and persists regardless of OS state. Setting a BIOS administrator password in addition ensures unauthorized users cannot re-enable the USB boot option.

BDisable the USB ports on Device Manager

Device Manager disables USB ports within the running OS, but it has no effect during the pre-boot phase when a USB device could still be selected as a boot medium.

CDisable the USB ports on Control Panel

Control Panel is an OS-level tool that manages Windows settings and cannot control hardware boot behavior that occurs before Windows initializes.

DDisable the USB ports on UAC

UAC (User Account Control) is a Windows privilege elevation mechanism that manages application permission prompts and has no relationship to USB hardware control or boot security.

Concept tested: BIOS/UEFI USB port and boot order security

Source: https://uefi.org/specifications

Topics

#BIOS#USB security#boot security#server hardening

Community Discussion

No community discussion yet for this question.

Full SK0-004 Practice