Context: Windows 8 supports a feature of the UEFI specification known as "Secure boot", which uses a public-key infrastructure to verify the integrity of the operating system and prevent unauthorized programs such as bootkits from infecting the device's boot process. Some pre-built devices may be described as "certified" by Microsoft; these must have secure boot enabled by default, and provide ways for users to disable or re-configure the feature. ARM-based Windows RT devices must have secure boot permanently enabled.

Question: How does secure boot help avert boot process infections?
Answer: uses a public-key infrastructure to verify the integrity of the operating system

Question: What requirements do Microsoft certified devices have?
Answer: must have secure boot enabled by default, and provide ways for users to disable or re-configure the feature

Question: What must always be enable in ARM-based Windows RT devices?
Answer: secure boot

Question: How doesn't secure boot help avert boot process infections?
Answer: Unanswerable

Question: How does insecure boot help avert boot process infections?
Answer: Unanswerable

Question: What requirements don't Microsoft certified devices have?
Answer: Unanswerable

Question: What requirements do Microsoft uncertified devices have?
Answer: Unanswerable

Question: What must always be enable in ARM-based Windows TR devices?
Answer: Unanswerable