Câu 35: CS0-001: CompTIA CySA+ Certification Exam

An administrator has been investigating the way in which an actor had been exfiltrating confidential data from a web server to a foreign host. After a thorough forensic review, the administrator determined the server's BIOS had been modified by rootkit installation. After removing the rootkit and flashing the BIOS to a known good state, which of the following would BEST protect against future adversary access to the BIOS, in case another rootkit is installed?

1. A. Anti-malware application
2. B. Host-based IDS
3. C. TPM data sealing — đáp án hiện tại
4. D. File integrity monitoring