Windows 8 supports a feature of the UEFI specification known as "Secure boot", which uses a public-key infrastructure to verify the integrity of the operating system and prevent unauthorized programs such as bootkits from infecting the device's boot process. Some pre-built devices may be described as "certified" by Microsoft; these must have secure boot enabled by default, and provide ways for users to disable or re-configure the feature. ARM-based Windows RT devices must have secure boot permanently enabled. COUNT 3
QSN1 How does secure boot help avert boot process infections? ANS1 uses a public-key infrastructure to verify the integrity of the operating system QSN2 What requirements do Microsoft certified devices have? ANS2 must have secure boot enabled by default, and provide ways for users to disable or re-configure the feature QSN3 What must always be enable in ARM-based Windows RT devices? ANS3 secure boot