フリー問題

問題文

A legacy application cannot enforce password length, so management adds a daily review of its access log, and the auditor must still reach a conclusion. Which naming is correct?

選択肢

1. The daily log review works as routine offset control, while the recount performed by the auditor works as control design change in the same documentation.
2. The daily log review works as monthly offset control, while the recount performed by the auditor works as outside audit testing notes in the same documentation.
3. The daily log review works as additional listed evidence review, while the recount performed by the auditor works as outside audit testing notes in the same documentation.
4. The daily log review works as additional listed evidence review, while the recount performed by the auditor works as control design change in the same documentation.