問題文
A company must judge whether requiring approval for every privileged role activation is workable. Which consideration matters?
選択肢
- Approval never adds meaningful delay, so it should be required everywhere, because the approvers are notified immediately and an organization that cares about this can staff the approval queue around the clock.
- Approval adds delay, so it fits the roles that are only used occasionally but can block incident response when it is applied to a role that somebody needs while they are working under time pressure.
- Approval is only available for read-only roles, because a role that can change the tenant must be usable without delay and the platform therefore does not allow an approval step to stand in front of it.
- Approval removes the need for auditing the activation, because the approver's decision is itself the record of why the role was used and duplicating it in the audit log adds nothing.