Exam MD-100 topic 5 question 109 discussion

Actual exam question from Microsoft's MD-100

Question #: 109
Topic #: 5

You have 10 computers that run Windows 8.1 and have the following configurations:

• A single MBR disk
• A disabled TPM chip
• Disabled hardware virtualization
• UEFI firmware running in BIOS mode
• Enabled Data Execution Prevention (DEP)

You plan to upgrade the computers to Windows 10.

You need to ensure that the computers can use Secure Boot.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Enable hardware virtualization.
B. Disable DEP.
C. Convert the MBR disk to a GPT disk.
D. Enable the TPM chip.
E. Convert the firmware from BIOS to UEFI.

Show Suggested Answer

Suggested Answer: CE 🗳️

by CSue at Feb. 12, 2023, 5:38 p.m.

Comments

Submit Cancel

rafapg

1 year, 11 months ago

https://www.minitool.com/lib/secure-boot.html

upvoted 1 times

...

e635466

2 years, 2 months ago

Selected Answer: BE

A. Enable hardware virtualization. -> not necessary B. Disable DEP. =-> CORRECT C. Convert the MBR disk to a GPT disk. -> Secure Boot works with both disks D. Enable the TPM chip. -> does not require TPM chip E. Convert the firmware from BIOS to UEFI. -> CORRECT

upvoted 1 times

...

CSue

2 years, 4 months ago

C. Convert the MBR disk to a GPT disk. D. Enable the TPM chip. Secure Boot requires a UEFI firmware and a GPT disk. The TPM chip is also required to store Secure Boot keys. Enabling hardware virtualization and disabling DEP are not required to use Secure Boot. Converting the firmware from BIOS to UEFI is not required as the UEFI firmware is already running in BIOS mode.

upvoted 2 times

420puffpuff

2 years, 4 months ago

C. Convert the MBR disk to a GPT disk: Secure Boot requires a disk that uses the GPT partition scheme. E. Convert the firmware from BIOS to UEFI: Secure Boot requires a firmware that uses UEFI, and BIOS does not support Secure Boot. While the presence of a TPM chip is not strictly required for Secure Boot, it can be used to enhance the security of the boot process by ensuring that the system has not been tampered with before booting. Additionally, some implementations of Secure Boot may require a TPM chip to function properly.

upvoted 3 times

flabezerra

2 years, 4 months ago

C and E When installing Windows on UEFI-based PCs using Windows Setup, your hard drive partition style must be set up to support either UEFI mode or legacy BIOS-compatibility mode. Configure your drive for UEFI by using the GPT partition style. This option lets you use the PC’s UEFI firmware features. Windows Setup: Installing using the MBR or GPT partition style: https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-setup-installing-using-the-mbr-or-gpt-partition-style Ability to support Windows 10 security features like Secure Boot, Microsoft Defender Credential Guard, and Microsoft Defender Exploit Guard. All require UEFI firmware. United Extensible Firmware Interface (UEFI) firmware requirements: https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-uefi

upvoted 4 times

...