27 real Bootloaders, OTA & Security questions from the Embedded Systems bank, as asked in Indian campus drives and tech interviews. Every question has a verified answer and an AI-tutor explanation on placd — free to start.
1. What is Bootloader?
Junior
A.AES shares one secret key and is fast for bulk data; RSA and ECC use key pairs for signatures and key exchange, with ECC P-256 matching RSA-3072 strength
B.small first program in reserved flash that validates and jumps to the application, and can replace it over a serial, USB or wireless link
C.hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
D.sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
2. Which term means: "small first program in reserved flash that validates and jumps to the application, and can replace it over a serial, USB or wireless link"?
A.Bootloader — sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
B.Bootloader — two application slots so an update is written to the inactive slot and swapped only after validation, letting the device fall back if the new image fails
C.Bootloader — each stage verifies the digital signature of the next against a key anchored in ROM or OTP before executing it, so only authorised firmware ever runs
D.Bootloader — small first program in reserved flash that validates and jumps to the application, and can replace it over a serial, USB or wireless link
A.each stage verifies the digital signature of the next against a key anchored in ROM or OTP before executing it, so only authorised firmware ever runs
B.small first program in reserved flash that validates and jumps to the application, and can replace it over a serial, USB or wireless link
C.hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
D.AES shares one secret key and is fast for bulk data; RSA and ECC use key pairs for signatures and key exchange, with ECC P-256 matching RSA-3072 strength
5. Which term means: "each stage verifies the digital signature of the next against a key anchored in ROM or OTP before executing it, so only authorised firmware ever runs"?
A.Secure boot — small first program in reserved flash that validates and jumps to the application, and can replace it over a serial, USB or wireless link
B.Secure boot — each stage verifies the digital signature of the next against a key anchored in ROM or OTP before executing it, so only authorised firmware ever runs
C.Secure boot — sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
D.Secure boot — tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware
A.sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
B.each stage verifies the digital signature of the next against a key anchored in ROM or OTP before executing it, so only authorised firmware ever runs
C.hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
D.tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware
8. Which term means: "sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one"?
A.Chain of trust — sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
B.Chain of trust — each stage verifies the digital signature of the next against a key anchored in ROM or OTP before executing it, so only authorised firmware ever runs
C.Chain of trust — AES shares one secret key and is fast for bulk data; RSA and ECC use key pairs for signatures and key exchange, with ECC P-256 matching RSA-3072 strength
D.Chain of trust — monotonic version counter kept in OTP or secure storage so an attacker cannot reinstall an older signed image with known vulnerabilities
A.hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
B.hashing the image with SHA-256 and signing with a private ECDSA or RSA key at build time, with the public key embedded in the bootloader for verification
C.small first program in reserved flash that validates and jumps to the application, and can replace it over a serial, USB or wireless link
D.two application slots so an update is written to the inactive slot and swapped only after validation, letting the device fall back if the new image fails
11. Which term means: "hashing the image with SHA-256 and signing with a private ECDSA or RSA key at build time, with the public key embedded in the bootloader for verification"?
A.Firmware signing — each stage verifies the digital signature of the next against a key anchored in ROM or OTP before executing it, so only authorised firmware ever runs
B.Firmware signing — hashing the image with SHA-256 and signing with a private ECDSA or RSA key at build time, with the public key embedded in the bootloader for verification
C.Firmware signing — AES shares one secret key and is fast for bulk data; RSA and ECC use key pairs for signatures and key exchange, with ECC P-256 matching RSA-3072 strength
D.Firmware signing — hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
A.hashing the image with SHA-256 and signing with a private ECDSA or RSA key at build time, with the public key embedded in the bootloader for verification
B.two application slots so an update is written to the inactive slot and swapped only after validation, letting the device fall back if the new image fails
C.monotonic version counter kept in OTP or secure storage so an attacker cannot reinstall an older signed image with known vulnerabilities
D.tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware
14. Which term means: "two application slots so an update is written to the inactive slot and swapped only after validation, letting the device fall back if the new image fails"?
A.A/B partitions — sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
B.A/B partitions — small first program in reserved flash that validates and jumps to the application, and can replace it over a serial, USB or wireless link
C.A/B partitions — two application slots so an update is written to the inactive slot and swapped only after validation, letting the device fall back if the new image fails
D.A/B partitions — monotonic version counter kept in OTP or secure storage so an attacker cannot reinstall an older signed image with known vulnerabilities
A.hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
B.hashing the image with SHA-256 and signing with a private ECDSA or RSA key at build time, with the public key embedded in the bootloader for verification
C.tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware
D.AES shares one secret key and is fast for bulk data; RSA and ECC use key pairs for signatures and key exchange, with ECC P-256 matching RSA-3072 strength
17. Which term means: "hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application"?
A.TrustZone for Cortex-M — each stage verifies the digital signature of the next against a key anchored in ROM or OTP before executing it, so only authorised firmware ever runs
B.TrustZone for Cortex-M — two application slots so an update is written to the inactive slot and swapped only after validation, letting the device fall back if the new image fails
C.TrustZone for Cortex-M — AES shares one secret key and is fast for bulk data; RSA and ECC use key pairs for signatures and key exchange, with ECC P-256 matching RSA-3072 strength
D.TrustZone for Cortex-M — hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
A.sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
B.tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware
C.hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
D.hashing the image with SHA-256 and signing with a private ECDSA or RSA key at build time, with the public key embedded in the bootloader for verification
20. Which term means: "tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware"?
A.Secure element — hashing the image with SHA-256 and signing with a private ECDSA or RSA key at build time, with the public key embedded in the bootloader for verification
B.Secure element — small first program in reserved flash that validates and jumps to the application, and can replace it over a serial, USB or wireless link
C.Secure element — sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
D.Secure element — tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware
A.AES shares one secret key and is fast for bulk data; RSA and ECC use key pairs for signatures and key exchange, with ECC P-256 matching RSA-3072 strength
B.hashing the image with SHA-256 and signing with a private ECDSA or RSA key at build time, with the public key embedded in the bootloader for verification
C.tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware
D.sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
23. Which term means: "AES shares one secret key and is fast for bulk data; RSA and ECC use key pairs for signatures and key exchange, with ECC P-256 matching RSA-3072 strength"?
A.Symmetric versus asymmetric crypto — AES shares one secret key and is fast for bulk data; RSA and ECC use key pairs for signatures and key exchange, with ECC P-256 matching RSA-3072 strength
B.Symmetric versus asymmetric crypto — tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware
C.Symmetric versus asymmetric crypto — hashing the image with SHA-256 and signing with a private ECDSA or RSA key at build time, with the public key embedded in the bootloader for verification
D.Symmetric versus asymmetric crypto — hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
A.monotonic version counter kept in OTP or secure storage so an attacker cannot reinstall an older signed image with known vulnerabilities
B.sequence from immutable boot ROM through bootloader to application and OS in which each link is verified or measured by the previous one
C.hardware split of memory and peripherals into secure and non-secure worlds on Cortex-M23 and M33 via the SAU, isolating keys and secure services from the application
D.small first program in reserved flash that validates and jumps to the application, and can replace it over a serial, USB or wireless link
26. Which term means: "monotonic version counter kept in OTP or secure storage so an attacker cannot reinstall an older signed image with known vulnerabilities"?
A.Anti-rollback — two application slots so an update is written to the inactive slot and swapped only after validation, letting the device fall back if the new image fails
B.Anti-rollback — monotonic version counter kept in OTP or secure storage so an attacker cannot reinstall an older signed image with known vulnerabilities
C.Anti-rollback — tamper-resistant chip such as ATECC608 or SE050 that stores keys and performs cryptography so private keys never leave the hardware
D.Anti-rollback — each stage verifies the digital signature of the next against a key anchored in ROM or OTP before executing it, so only authorised firmware ever runs
Answers, AI explanations, and a free readiness check
Sign up free to check your answers with explanations, ask the AI tutor anything on any question, and take the free 2-minute readiness check for a scored result. The full AI mock interview, scored like a real panel, unlocks with Pro.