A security administrator is configuring a new server to ensure that only signed, trusted operating system boot loaders and kernel components can run during startup. The server's UEFI firmware supports secure boot. What is the PRIMARY purpose of enabling UEFI Secure Boot?

To measure the boot process and store the measurements in the TPM for remote attestation.

To encrypt the entire hard drive so that data is unreadable without the correct key.

To provide a secure channel for the OS to communicate with the TPM.

To prevent the execution of unsigned or untrusted boot loaders and kernel components during the boot process.

What is the primary security benefit of hypervisor isolation in virtualization?

It provides a firewall for each virtual machine

It prevents a compromise in one virtual machine from directly affecting other virtual machines on the same host

It speeds up the execution of virtual machines

It encrypts all data stored on the host's hard drive

Certified Information Systems Security Professional

Domain 3Objective 4

3.4 - Understand Security Capabilities of Information Systems (IS) (e.g., Memory Protection, Trusted Platform Module (TPM), Encryption/decryption) CISSP Practice Questions (Page 4)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

15concepts

13%of the exam

Questions 16–20

16application · medium
A security administrator is configuring a new server to ensure that only signed, trusted operating system boot loaders and kernel components can run during startup. The server's UEFI firmware supports secure boot. What is the PRIMARY purpose of enabling UEFI Secure Boot?
Select an answer first
17foundation · easy
Which encryption type is most appropriate for encrypting large volumes of data, such as a database or a file, due to its speed and efficiency?
Select an answer first
18foundation · easy
Which TPM capability allows a remote party to verify the integrity of a system's boot process and configuration?
Select an answer first
19foundation · easy
What is the primary security benefit of hypervisor isolation in virtualization?
Select an answer first
20foundation · easy
Which cryptographic algorithm is a symmetric block cipher that is widely used for encrypting data at rest and in transit?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

3.4 - Understand Security Capabilities of Information Systems (IS) (e.g., Memory Protection, Trusted Platform Module (TPM), Encryption/decryption) CISSP Practice Questions (Page 4)

Questions 16–20

A security administrator is configuring a new server to ensure that only signed, trusted operating system boot loaders and kernel components can run during startup. The server's UEFI firmware supports secure boot. What is the PRIMARY purpose of enabling UEFI Secure Boot?

Which encryption type is most appropriate for encrypting large volumes of data, such as a database or a file, due to its speed and efficiency?

Which TPM capability allows a remote party to verify the integrity of a system's boot process and configuration?

What is the primary security benefit of hypervisor isolation in virtualization?

Which cryptographic algorithm is a symmetric block cipher that is widely used for encrypting data at rest and in transit?

Keep studying — Security Architecture and Engineering