Saturday, November 24, 2007

BIOS and Security

How can BIOS configuration options be used to enhance system security?

1. Disable power management options.
2. Modify the serial port options.
3. Disable plug-and-play support.
4. >>Enable a hardware-based password.- Correct

Explanation : You can enhance system security by enabling hardware-based passwords through the BIOS configuration settings. When you specify a hardware-based password, the user must provide the password during system startup to continue the boot process.

You should not modify serial port options as a way to enhance security. This action does nothing to enhance system security. You would modify serial port settings when the default settings cause the serial ports to conflict with other devices or when you want to disable the serial ports to free up their resources for use by other devices.

You should not disable plug-and-play support as a way to enhance system security. Most current expansion devices and peripherals are plug-and-play devices. Disabling plug-and-play support could make it difficult, if not impossible, to install new devices and could interfere with the operation of devices that are already installed.

You should not disable power management options as a way to enhance security. In fact, security is not as strong when you disable power management. The power management settings let you enable features like automatically causing an idle computer to go into stand-by mode or hibernation mode. You can actually improve system security by enabling power management and requiring a password when bringing a system out of standby or hibernation.
Objective: Security