You have a new computer and want to restrict other people from replacing the operating system.
Which action prevents a user from installing an alternate operating system by using physical media if the user has physical media if the user has physical access to the computer?
To prevent a user from installing an alternate operating system using physical media, protecting the computer's BIOS with a password is the most effective method. By password-protecting the BIOS, you can restrict unauthorized access to the BIOS settings, which includes the ability to change the boot order. This would prevent someone from booting from external media such as a USB drive or a CD/DVD and installing a new operating system. Disabling removable devices and drives may not be sufficient because someone with physical access can simply re-enable these options in the BIOS if it is not password protected.
Correct answer is: B. disabling removable devices and drives
I can understand the question, but the correct answer is not listed if this will be present at the exam, I will file a complaint
Since I have physical access, why can't I enable the removable devices myself an do the new OS installations
if you disable removable drives, i can simply load the new OS from a bootable drive by changing boot options during startup
B. disabling removable devices and drives
B alone should NOT be correct: Since I have physical access, why can't I enable the removable devices myself in the BIOS an do the new OS installation. (password protecting the bios aswell would solve this)
C. Password protecting the BIOS. A will encrypt the Drive. If I install a new OS on top of the encrypted media guess what? My new OS is up and running. The parts of the rive that weren't overwritten by the new OS remain encrypted, but that doesn't affect the new install. Disabling Removable devices and rives is an Active Directoy funtion, it doesn't prevent you from booting to the removable media (USB Drive or CD/DVD and installing the new OS. You don't even need to login to the existing OS to install a NEW OS. Just boot to the media and bypass all the other options.
To clarify: From a forensic standpoint, the physical media underneath the freshly formatted (quick formatted) is unrecoverable because the blocks are ony 'marked' as unused, but unencrypted 'quick formatted space' is recoverable with forensic tools, encrypted quick formatted space can be read by forensic tools as pure random gobbledygook, but being marked as 'unused' it is formatted and usable to the newly installed OS.