QuestionQ37

Security Engineering

A malicious actor exploited firmware flaws and used rootkits to attack an organization. After the organization recovered from the incident, an engineer must recommend a solution that lowers the likelihood of a similar attack in the future. Which of the following solutions is most relevant?

  • A Enabling software integrity checks
  • B Installing self-encrypting drives
  • C Implementing measured boot
  • D Configuring host-based encryption
Explanation

Measured Boot records measurements of firmware and boot components in a TPM and supports remote attestation of the startup state. This provides a hardware-rooted way to identify compromised early-boot components, including firmware rootkits, which can otherwise conceal themselves from operating-system security software.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!