Which of the following BIOS level settings allow an administrator to view warnings on possible hardware level changes?

Drive lock is a BIOS feature that sets a password directly on the hard drive using the ATA Security feature set, preventing unauthorized boot from that drive.

Intrusion detection at the BIOS level works with a chassis intrusion header and switch on the motherboard - when the case is opened, the circuit is triggered and the BIOS logs the event and can display a warning on the next boot. This allows administrators to detect unauthorized physical access or hardware modifications.

A BIOS password restricts access to BIOS setup configuration screens but does not detect or report physical hardware-level changes to the chassis.

A Trusted Platform Module (TPM) is a dedicated security chip used for cryptographic key storage, disk encryption, and secure boot attestation, not for detecting chassis intrusion.