問題文
A reviewer has to write down what a firm carries when it puts the deciding parts of its access control with an outside host, if the firm has judged that host to be sound. Which reading does NIST SP 800-207 support, and what second failing does it set beside that one?
選択肢
- A part of the firm can be left unable to work if a slip by the host puts the deciding parts beyond reach of the network, and the second failing is that the host may hold the record of past rulings for its own audit, so the firm loses the standing to answer a question about an earlier decision, in that hosted-component risk.
- A part of the firm can be left unable to work if a slip by the host puts the deciding parts beyond reach of the network, and the second failing is that the gateway in front of a resource may be told to open a path by a neighbor on the same host, so the firm ends up carrying a stranger's traffic inward, in that hosted-component risk.
- The whole firm can be left unable to work if a slip by the host puts the deciding parts beyond reach of the network, and the second failing is that a resource may lie beyond the reach of the administering part, so a granted request still waits for a path, in that hosted-component risk.
- The whole firm can be left unable to work if a slip by the host puts the deciding parts beyond reach of the network, and the second failing is that the host may read the weights carried in the deciding rules, so a rival sharing the same host learns how the firm ranks one part of its own sources of evidence against another, in that hosted-component risk.