フリー問題

問題文

A configuration baseline exists for the standard server build, and the auditor wants to know whether the running servers still match it. Which procedure gives the strongest evidence?

選択肢

1. The auditor should obtain team meeting minutes from the running systems, because interviews alone cannot establish binding budget approval in the current configuration.
2. The auditor should obtain supporting automated comparison output from the running systems, because interviews alone cannot establish binding budget approval in the current configuration.
3. The auditor should obtain supporting automated comparison output from the running systems, because interviews alone cannot establish present baseline conformity notes in the current configuration.
4. The auditor should obtain team meeting minutes from the running systems, because interviews alone cannot establish present baseline conformity notes in the current configuration.