問題文
An auditor asks the organization to prove that nobody accessed a particular server outside change windows. What is the limit of what the platform's records can show?
選択肢
- They cover access performed through the platform, and say nothing about access by other means.
- They cover every form of access to the server, because the sensor observes the host continuously and any interactive session with it therefore appears in the platform's records.
- They cover only access by administrators.
- They cover nothing, because access is not recorded anywhere in the platform's own audit records.