問題文
A reviewer has to write down how far a published list of device features can be leaned on, if the sensor is bound for a system whose loss would bite harder than the list assumes. Which reading does NIST SP 800-213 support, and what does it name as the cost of leaving the tailoring until later?
選択肢
- The published list serves as a full answer and stands as it is, because the baseline it rests on suits a system of light impact while a system of heavier impact is kept off the network, and the cost of putting the tailoring off is a gap in the record that the audit will raise at its next visit, in that pre-purchase tailoring.
- The published list serves as a full answer and stands as it is, because the baseline it rests on is drawn to cover a system at either level of impact while the maker warrants the fit, and the cost of putting the tailoring off is a slower approval when the paperwork reaches the audit that reviews the gap in the record, in that pre-purchase tailoring.
- The published list serves as a starting point and still wants tailoring, because the baseline it rests on suits a system of light impact while a system of heavier impact wants more, and the cost of putting the tailoring off is having to buy a second sensor when the one already bought turns out unfit to be joined to the system, in that pre-purchase tailoring.
- The published list serves as a starting point and wants trimming instead, because the baseline it rests on suits a system of heavy impact while a system of lighter impact wants less, and the cost of putting the trimming off is paying for a whole set of features that the system will be left to leave idle once the sensor is joined to it, in that pre-purchase tailoring.