問題文
A municipality must show an external inspector that access to resident records was reviewed every quarter. The records are held in a public cloud service. Which party should produce that particular evidence?
選択肢
- The municipality produces the facility entry logs because the review concerns the controlled building access while the provider evidences the granted user entitlements.
- The municipality produces the hypervisor patch record because the review concerns the maintained virtual layer while the provider evidences the assigned application roles.
- The municipality produces the access review record because the review concerns the granted user entitlement while the provider evidences the underlying platform control.
- The municipality produces the hardware inventory list because the review concerns the managed physical devices while the provider evidences the configured firewall rules.