Security (BIOS)

Question 1

FULL DISK ENCRYPTION

Answer 1

• Everything is encrypted, not just individual files
• Windows Bit Locker disk encryption
• BIOS intergrates with TPM (Trusted Platform Module)

Question 2

T.P.M.

TRUSTED PLATFORM MODULE

Answer 2

• Can be added to many motherboards
• Built-in some systems
• Adds advanced cryptographic functions

Question 3

LoJACK (Laptops)

Answer 3

• Originally called computrace
  
  • Increased from vehicle recovery system
• Built-in to the BIOS
  
  • Software installed into the OS
  • Reinstalls itself if removed
• Phone home functions
  
  • Provide information on location

-Theft Mode

Question 4

Secure Boot

Answer 4

• Malicious software can “own” your system
  
  • Malicious drivers or OS software
• Secure Boot
  
  • Part of the UEFI specification
• Digital sign known-good software
  
  • Cryptographically secure
  • Software won’t run without signature