フリー問題

問題文

The fourth tenet says access is determined by dynamic policy. Which inputs does it name as forming that policy?

選択肢

1. The assigned role of the subject alone, since roles are the one stable unit that policy is written against over time.
2. The network segment the request arrives on, combined with the destination port, which together identify the workflow being attempted.
3. The subject's identity and the sensitivity of the requested data, with the state of the requesting device excluded because a changing state would make the evaluation non-deterministic.
4. The observable state of client identity, the application or service, and the requesting asset, possibly with behavioral and environmental attributes.