Discuss WGU Cybersecurity Architecture And Engineering (D488) Exam Topic 5 Question 16

A company is concerned about the potential risks associated with unauthorized modifications to the Basic Input/Output System (BIOS) firmware on its servers. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.

Which technique will prevent unauthorized modifications to the BIOS firmware on a server?

AUsing an intrusion detection system to detect and prevent attacks

BBIOS protection

CBIOS monitoring

DConducting regular backups of the server's data

Suggested Answer: B

BIOS protectioninvolves enabling hardware security features such asfirmware password protection,secure boot, andwrite protection, which prevent unauthorized firmware modifications.

NIST SP 800-147 (BIOS Protection Guidelines):

''Proper BIOS protection mechanisms, including authenticated updates and access control, are critical to maintaining the integrity of the platform's startup environment.''

This is apreventive control. BIOS monitoring is reactive; backups protect data, not firmware integrity.

WGU Course Alignment:

Domain:System Security Engineering

Topic:Apply firmware and BIOS security controls to prevent low-level tampering

Get Premium Cybersecurity Architecture and Engineering (D488) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Jennie 1 month ago

D) BIOS protection is crucial. It prevents unauthorized access completely.

Devorah 1 month ago

I agree, but A) BIOS monitoring is also important for detecting changes.

Kimbery 1 month ago

I think D) BIOS protection is the best choice. It directly secures the firmware.

Toshia 2 months ago

Agreed, D) is the way to go! Can't risk those firmware changes.

Georgeanna 2 months ago

Wait, can BIOS protection really prevent all modifications? Sounds too good to be true.

Sueann 2 months ago

Regular backups are important, but they won't stop unauthorized changes.

Ariel 2 months ago

I think A) BIOS monitoring is also crucial, though.

Hassie 2 months ago

Definitely D) BIOS protection! That's the best way to lock it down.

Elmira 2 months ago

I’m a bit confused; I thought using an intrusion detection system could help, but I guess it’s more about detection than prevention.

Linsey 3 months ago

I practiced a similar question about endpoint security, and I think BIOS protection is definitely the right choice for preventing modifications.

Cecily 3 months ago

I think BIOS monitoring could be relevant, but I feel like it might not fully prevent unauthorized changes.

Nicolette 3 months ago

I remember studying BIOS protection techniques, but I'm not entirely sure if that's the best answer here.

WGU Cybersecurity Architecture and Engineering (D488) Exam - Topic 5 Question 16 Discussion