Section 7 OBJ 3.4: BIOS/UEFI

Question 1

Basic input output system (BIOS)

Answer 1

text based system that a CPU uses to start the computer
serves as a way of configuring the motherboard
older than UEFI
Uses a MBR
keyboard only
only supports 32 bit CPU and motherboard

Question 2

Unified extensible firmware interface (UEFI)

Answer 2

supports 64-bit processors and provides a GUI
uses a GUID partition table (GPT)
faster than BIOS
mouse, keyboard, and network
larger ROM size

Question 3

Read-Only Memory (ROM)

Answer 3

Type of embedded chip on the motherboard upgradable through flashing

Question 4

Power-On Self-Test (POST)

Answer 4

first step when turning on computer
Diagnostic testing sequence to check the computer’s input/output

Question 5

boot order

Answer 5

determines the order to check for an operating system

Question 6

flashing

Answer 6

used to upgrade the BIOS/UEFI
performed during upgrades, security fixes, or feature improvements

Question 7

Supervisor/Administrator/Setup password

Answer 7

Used to protect access to the BIOS or UEFI config program and prevents unauthorized access

Question 8

User/System Password

Answer 8

used to lock access to the entire computer
rarely used in corporate environments

Question 9

Storage/Hard Drive Password

Answer 9

password that locks access to a hard drive connected to the system and requires the end user’s password

Question 10

Secure Boot

Answer 10

Enabled in UEFI and settings. Not available in BIOS
Used to verify system integrity

Question 11

Root kit

Answer 11

a special type of malware

Question 12

3 ways UEFI/BIOS can secure system

Answer 12

Set passwords
Enable Secure boot
Restrict or disable USB ports

Question 13

Hardware Root of Trust (RoT)

Answer 13

cryptographic module embedded inside a computer that endorses trusted execution and attests to boot settings and metrics
Verifies signatures

Question 14

Trusted Platform Module (TPM)

Answer 14

most common hardware RoT
Specification for hardware-based storage of digital signatures, keys, hashed passwords, and other user/platform identification
ensures critical components havent been tampered with
can provide encryption for storage devices

Question 15

Hardware Security Module (HSM)

Answer 15

appliance for generating and storing cryptographic keys that is less susceptible to tampering and inside threats

Question 16

Quiet Mode

Answer 16

reduces fan speed and allows higher temps for quieter fans

Question 17

Balanced mode

Answer 17

default fan speed setting, maintains normal fan speeds and temperatures

Question 18

Cool Mode

Answer 18

allows the fans to run harder to cool the system