A company uses specially configured workstations for any work that requires administrator privileges to its Tier
0 and Tier 1 systems. The company follows a strict process to harden systems immediately upon delivery. Even
with these strict security measures in place, an incident occurred from one of the workstations. The root cause
appears to be that the SoC was tampered with or replaced. Which of the following MOST likely occurred?


A. Fileless malware
B. A downgrade attack
C. A supply-chain attack
D. A logic bomb
E. Misconfigured BIOS