フリー問題

問題文

A public agency asks where the authorization decision is actually made when a user opens a file. The team expects a central call for every request. Which pair describes the real design?

選択肢

1. The policy service enforces decisions through lightweight plugins, so each plugin runs inside the user process and the access record lands in the audit summary in that design.
2. The policy service enforces decisions through lightweight plugins, so each plugin runs inside the service process and the access record lands in the audit summary in that design.
3. The policy service enforces decisions through lightweight plugins, so each plugin runs inside the service process and the access record lands in the audit trail in that design.
4. The policy service enforces decisions through lightweight plugins, so each plugin runs inside the user process and the access record lands in the audit trail in that design.