Which boot attestation concept gathers secure metrics for boot validation?

Which boot attestation concept gathers secure metrics for boot validation?

• A. Trusted Boot/Measured Boot gathers secure metrics to validate the boot process in an attestation report.
• B. Self-Encrypting Drive encrypts data at rest.
• C. UEBA analyzes user behavior across networks.
• D. HIPS blocks suspicious actions.

Answer: (A)

Boot attestation uses secure measurements of the boot path to prove the system started in a trusted state. Trusted Boot and Measured Boot capture the components loaded during startup—BIOS/UEFI, bootloader, kernel, drivers—and record their integrity measurements in a TPM. These measurements create an attestation report that can be verified remotely to confirm the boot process wasn’t tampered with. The other options focus on different security needs: encrypting data at rest, analyzing user behavior, or blocking suspicious host actions, none of which provide the boot-time integrity measurements used for boot validation.

Boot attestation uses secure measurements of the boot path to prove the system started in a trusted state. Trusted Boot and Measured Boot capture the components loaded during startup—BIOS/UEFI, bootloader, kernel, drivers—and record their integrity measurements in a TPM. These measurements create an attestation report that can be verified remotely to confirm the boot process wasn’t tampered with. The other options focus on different security needs: encrypting data at rest, analyzing user behavior, or blocking suspicious host actions, none of which provide the boot-time integrity measurements used for boot validation.