フリー問題

問題文

Privileges have to come from groups that sit above the groups a user belongs to directly, and the same query returns many attributes that the policy never reads. Which statement should the engineer accept?

選択肢

1. Between the indirect groups and the direct groups, privileges from above require the query to fetch the indirect groups, and between the whole set and the chosen set, the response is trimmed once an engineer names the chosen set of attributes.
2. Between the indirect groups and the direct groups, privileges from above require the query to fetch the indirect groups, and between the whole set and the chosen set, the response is trimmed once an engineer names the whole set of attributes.
3. Between the indirect groups and the direct groups, privileges from above require the query to fetch the direct groups, and between the whole set and the chosen set, the response is trimmed once an engineer names the chosen set of attributes.
4. Between the indirect groups and the direct groups, privileges from above require the query to fetch the direct groups, and between the whole set and the chosen set, the response is trimmed once an engineer names the whole set of attributes.