フリー問題

問題文

A tool retrieves data that should be visible only to the individual asking. Which authentication setting should the maker choose for that tool?

選択肢

1. User authentication, so the tool runs with the asking user's own access.
2. Certificate-based authentication, which always identifies the end user.
3. No authentication, because the tool itself enforces permissions.
4. Agent author authentication, because it is simpler and the agent can filter the results afterward.