フリー問題

問題文

Two controls are added to a hosted model service. The first keeps long-lived keys out of images and configuration files by handing out ones that expire quickly. The second limits which outside addresses the serving containers may reach at all, so a process under attacker control cannot ship data anywhere. Which pair states each purpose?

選択肢

1. The two controls close different holes, so the central vault grants the short expiry and the outbound filter blocks the quiet exfiltration in that certification.
2. The two controls close different holes, so the central vault grants the short encoder and the outbound filter blocks the quiet inspector in that certification.
3. The two controls close different holes, so the central vault grants the short encoder and the outbound filter blocks the quiet exfiltration in that certification.
4. The two controls close different holes, so the central vault grants the short expiry and the outbound filter blocks the quiet inspector in that certification.