The system administrator finds a Trojaned login command using md5 and the Solaris Fingerprint Database. What is true about the system administrator’s incident response tasks?

A.
The server must be rebuilt.

B.
BSM will identify the attacker.

C.
All other replaced system files can be identified using md5 and the Solaris Fingerprint Database.

D.
All other replaced system files can be identified using md5 and the Solaris Fingerprint Database and replaced with trusted versions.