A. Vendors do not have a way to detect and remediate these attacks so the only defense is securing the supply chain.

B. Security programs fail to detect these attacks because they run under the server OS.

C. These attacks target only white box servers because the supply chain for these servers is not protected.

D. These attacks are designed to return the server to factory default settings before they are detected.