問題文
An external assessor asks the platform team to demonstrate that a regulatory requirement for unalterable retention is being met. Why is a screenshot of the retention setting an insufficient answer to that request?
選択肢
- The requirement is about the location of the objects, so the answer has to name the region that holds each copy and the route that the transfer between them takes.
- The requirement is about what happened to the objects, so the answer has to combine both the state of the lock with the record of who changed those settings and when.
- The requirement is about the media the objects are written to, so the answer has to include the certificate of the drives together with the report of the last upgrade.
- The requirement is about the accounts which reach the objects, so the answer has to list the directory groups mapped to each role and the sessions opened last month.