問題文
A reviewer has to write down what a firm has to have settled before the first phase of a firewall rollout may open, if no requirement list has been drawn up yet. Which reading does NIST SP 800-41 support, and what does it place inside the step that settles it?
選択肢
- The firm has to have found that a screening device is needed to carry out its own written policy, and that finding falls out of a study of danger taking in the threats to the system, the harm a loss of secrecy would bring, then the naming and weighing of the controls, in that pre-planning study.
- The firm has to have drafted the ruleset the screening device will carry, and that draft falls out of a list of traffic taking in the ports open on the system, the load a busy hour would bring, then the naming and grouping of the applications, in that pre-planning study.
- The firm has to have fixed the model number of the screening device it will buy, and that choice falls out of a survey of the market taking in the throughput of the system, the price a year of support would carry, then the naming and rating of the vendors, in that pre-planning study.
- The firm has to have settled the room the screening device will stand in, and that placing falls out of a review of the site taking in the power drawn by the system, the heat a full rack would give off, then the naming and locking of the cabinets, in that pre-planning study.