You have a computer that runs Windows 7. You need to confirm that all installed device drivers are digitally signed and trusted by the operating system. Which built in Windows tool should you run to perform this verification?

Difficulty: Easy

Correct Answer: Open a command prompt and run the Sigverif.exe File Signature Verification tool.

Explanation:


Introduction / Context:
Digitally signed device drivers help ensure that the code loaded into the Windows kernel has been tested and comes from a trusted publisher. Unsigned or tampered drivers can cause instability, crashes, or security vulnerabilities. In Windows 7, Microsoft provides several built in tools for managing drivers and verifying system files. This question asks you to identify the specific utility designed to verify that installed drivers are digitally signed.


Given Data / Assumptions:

  • The computer is running Windows 7.
  • You want to confirm that all installed device drivers are digitally signed.
  • You are looking for a built in tool, not a third party application.
  • Command line tools and graphical management consoles such as Device Manager are available.


Concept / Approach:
Windows includes a tool called the File Signature Verification tool (Sigverif.exe). Its purpose is to scan protected system files and device drivers to confirm whether they have valid digital signatures. The tool produces a report listing signed and unsigned files. Other tools, such as Device Manager, focus on installing, updating, and troubleshooting devices but do not provide a comprehensive digital signature audit of every driver file on the system.


Step-by-Step Solution:
1. Recall the names and purposes of common Windows 7 utilities for drivers and file integrity, such as Device Manager, Sigverif.exe, and System File Checker. 2. Identify which tool is explicitly designed to verify file signatures. Sigverif.exe is the File Signature Verification tool. 3. Understand that Sigverif scans the system for unsigned drivers and system files and produces a detailed log. 4. Compare this with Device Manager options like Scan for hardware changes, which only detects new or changed devices, not signature status. 5. Conclude that running Sigverif.exe from a command prompt or the Run dialog is the correct way to confirm that all device drivers are digitally signed.


Verification / Alternative check:
If you actually run Sigverif.exe on a Windows 7 machine, it opens a wizard that scans system files and drivers. At the end of the scan, it displays a report that clearly marks unsigned files. This directly satisfies the requirement to confirm that all device drivers are digitally signed. No equivalent feature in Device Manager provides a complete file signature audit.


Why Other Options Are Wrong:
Option b (Scan for hardware changes) only detects new or removed devices; it does not check digital signatures. Option c (Devices by connection view) changes how devices are organized in Device Manager but again does not verify signatures. Option d (Verify.exe) refers to tools related to system file checking, not the dedicated driver signature verification tool required in the question.


Common Pitfalls:
A common mistake is to assume that Device Manager can show all driver signature information automatically. While it can sometimes indicate issues with drivers, it is not designed for a system wide signature audit. Another pitfall is confusing Sigverif.exe with System File Checker (Sfc.exe); Sfc focuses on integrity of protected system files, not on enumerating and listing unsigned drivers for administrative review.


Final Answer:
You should open a command prompt and run the Sigverif.exe File Signature Verification tool.

More Questions from Microsoft Certification

Discussion & Comments

No comments yet. Be the first to comment!
Join Discussion