A retail store has a business requirement to deploy a kiosk computer in an open area. The kiosk computer's
operating system has been hardened and tested. A security engineer is concerned that someone could use
removable media to install a rootkit. Which of the following should the security engineer configure to BEST
protect the kiosk computer?


A. Measured boot
B. Boot attestation
C. UEFI
D. EDR