問題文
The service desk resets a password whenever a caller states a name and an employee number, both of which appear in the internal directory. Which weakness should the auditor report?
選択肢
- The desk accepts archived assessed callback checks as proof, so an outsider can obtain housed mailbox quotas steps with information anyone inside can read from the directory.
- The desk accepts archived assessed callback checks as proof, so an outsider can obtain working account access with information anyone inside can read from the directory.
- The desk accepts widely known attributes as proof, so an outsider can obtain working account access with information anyone inside can read from the directory.
- The desk accepts widely known attributes as proof, so an outsider can obtain housed mailbox quotas steps with information anyone inside can read from the directory.