A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?

A thorough analysis of the supply chain is the most effective way to address risks associated with counterfeit hardware. This involves vetting suppliers, tracking components from origin to delivery, and implementing quality control measures at various stages to ensure authenticity. A legally enforceable corporate acquisition policy is important for governance but doesn't directly prevent counterfeit hardware from entering the supply chain. A right to audit clause helps with accountability after a problem is identified but isn't proactive in preventing counterfeits. An in-depth penetration test focuses on cybersecurity vulnerabilities, not the physical authenticity of hardware components.