BIOS/UEFI and Windows Security Concepts

Vocabulary-style flashcards covering BIOS/UEFI boot process, secure boot, TPM, virtualization-based security, Windows security features, and Azure student resources discussed in the lecture.

BIOS

Basic Input/Output System; the firmware interface used to configure hardware settings before the operating system loads.

UEFI

Unified Extensible Firmware Interface; modern firmware interface replacing BIOS to initialize hardware and manage the boot process.

POST

Power-On Self Test; initial hardware checks (CPU, memory, ports, fans) performed during system boot.

Secure Boot

Boot loader verification that ensures the boot loader is trusted and signed to protect the integrity of the operating system at startup.

Boot Loader

Small, portable program on the storage device that loads the operating system after POST.

TPM

Trusted Platform Module; a hardware security module used to store cryptographic keys and enable secure features like measured boot.

Virtualization-based Security (VBS)

Windows security framework that uses hardware virtualization to isolate security services and protect credentials.

Credential Guard

A VBS-based feature that protects user credentials by isolating them from the rest of the operating system.

Windows Security Center

Centralized Windows interface for managing security features such as antivirus, firewall, account protection, and device security.

Virus & Threat Protection

Section of Windows Security that shows scan status, updates, and actions to address malware threats.

Firewall & Network Protection

Windows feature that configures firewall rules and network access to control inbound/outbound traffic.

Network Profiles (Domain, Private, Public)

Different firewall profiles corresponding to network type; determine how restrictive firewall rules are.

Inbound Connections

Network traffic that is coming into the computer from external networks.

Outbound Connections

Network traffic that is leaving the computer to external networks.

Reputation-based Protection

Real-time protection that evaluates websites and applications and flags potentially risky or malicious content.

App & Browser Control

Windows protection features for apps and web browsers, including SmartScreen-style reputation checks.

Core Isolation

Security feature that isolates parts of the Windows kernel in memory to protect against attacks on the kernel.

Windows Kernel

The core part of the Windows operating system that interfaces with hardware and software; protected by core isolation and other security measures.

Azure for Students / Azure Education Portal

Microsoft cloud resources available to students for free; access via the Azure education portal after verification.