Which of the following would be exposed to an attacker as a result of a remote employee attempting to connect to company resources without a VPN?

Private keys used for certificates or encryption are stored locally on the device and are never transmitted over the network during standard domain authentication.

When a remote employee authenticates to company resources without a VPN, protocols such as NTLM transmit credential material over unencrypted or interceptable channels on the public internet. An attacker positioned to perform a man-in-the-middle attack or passive network sniffing could capture domain credentials or NTLM challenge-response hashes, which can then be relayed or cracked offline to compromise the account.

The laptop's private key is a locally stored cryptographic asset that is not sent across the network when a user connects to remote company resources.

Disk encryption passwords are used locally to unlock storage volumes at boot and are not transmitted over the network during remote resource authentication.