Which of the following should be verified during incident response activities to determine the possible impact of the incident?

exams CAS-003 CAS-003 exam 0 Comments

A laptop is recovered a few days after it was stolen.

Which of the following should be verified during incident response activities to determine the possible impact of the incident?
A . Full disk encryption status
B . TPM PCR values
C . File system integrity
D . Presence of UEFI vulnerabilities

Answer: D