フリー問題

問題文

Why should a change to a firewall rule set be taken through a formal control process instead of being entered as soon as somebody thinks of it?

選択肢

1. Because such a change can move the security stance while leaving the running business untouched, so the record is there to show that nothing else was affected
2. Because such a change takes effect only once the record of it has been signed off, so the process is what carries the change out to the devices in the first place
3. Because such a change can move the security stance and the running business at the same time, so what was altered and why has to be on record
4. Because such a change is undone by itself at the close of each period, so the process is there to decide which of the changes already made are to be entered again by hand