問題文
An industrial control network permits only a listed set of programs to run, while the corporate network blocks programs that appear on a list of known-bad software. Which comparison is accurate?
選択肢
- The blocked-list approach is stronger, because a list of known-bad software is compiled from real observations while a list of permitted programs is only a guess about what an organization is going to need in the future.
- The permitted-list approach denies anything not listed and so also stops unknown programs but it needs more effort to maintain, while the blocked-list approach allows anything not listed and therefore misses new items.
- The permitted-list approach cannot be used on a control network, because such networks run vendor software that changes frequently.
- The two approaches are equivalent in effect, because a complete blocked list and a complete permitted list would produce the same decision for every program and both lists can in principle be made complete.