問題文
A team classifies its existing measures as preventive, detective or corrective in order to find gaps. They already reject Pods that request privileged mode, and they alert on unexpected process execution inside containers. Which classification of these two measures is correct?
選択肢
- Rejecting privileged Pods is a preventive control because it stops the unwanted state from existing, while alerting on unexpected process execution is a detective control.
- Neither measure is a control, because controls are only the items written in an external compliance framework, and the platform's own settings fall outside the review.
- Rejecting privileged Pods is a corrective control, because the workload has to be resubmitted with a different specification, and nothing is blocked.
- Both measures are detective controls, because in each case the platform has to evaluate the request or the running process before it can decide what to do next.