問題文
You must implement a tiered administration model so that the separation is enforced rather than merely documented. Which combination of mechanisms enforces it?
選択肢
- Give each tier a separate password policy so that the higher tiers require longer and more complex passwords, and shorten the maximum password age for the directory-level accounts.
- Restrict which computers each tier's accounts may sign in to, deny the lower tiers' accounts on the higher tiers' systems, and place the directory-level accounts in the group that blocks credential delegation and legacy authentication.
- Publish the model as a policy document, obtain sign-off from each system owner, and review compliance in quarterly audits so that deviations are recorded and escalated to management.
- Rename the administrative accounts so that their tier is visible in the account name, document the naming convention so that operators can tell at a glance which accounts are privileged, and add the tier to the description field of each account so that it also appears in directory listings and audit reports.