Exam CAS-003 topic 1 question 36 discussion

There is no doubt. Best preventative measure from root kits is B. Configure and use measured boot

B. Configure and use measured boot

A Measured Boot helps better protect your machine from rootkits and other malware. Measured Boot will check each start up component including the firmware all the way to the boot drivers and it will store this information in what is called a Trusted Platform Module (TPM).

I'm almost leaning towards the given answer. The question says the systems are modern and have TPMs. Based on what Ive read on TPMs, (https://docs.microsoft.com/en-us/windows/security/information-protection/tpm/trusted-platform-module-overview) they sort of already have a function of ensuring proper boot code. I feel like it may be a trick question. Which would provide the MOST preventative value, which would be D because the antivirus would catch more than just measured boot would. I'm torn between answering the question and answering the comptia question.

Root kit is the key word, measured boot is made partially to protect against root kits

Measured Boot is a new feature of Windows 8 that was created to help better protect your machine from rootkits and other malware. Measured Boot will check each start up component including the firmware all the way to the boot drivers and it will store this information in what is called a Trusted Platform Module (TPM).

B Measured boot would be the way to monitor for root kits in the future. "Measured Boot doesn’t make an implicit value judgement as to good or bad, and it doesn’t stop the platform from running, so Measured Boot can be much more liberal about what it checks." https://community.juniper.net/answers/blogs/elevate-member/2020/12/22/whats-the-difference-between-secure-boot-and-measured-boot

B.. should be the answer.

ANSR IS B

B. Configure and use measured boot