フリー問題

問題文

An enterprise records web server access but does not record administrator logons on the same servers. Which gap matters most when the auditor evaluates the logging scope?

選択肢

1. Without administrator logon records the enterprise cannot reconstruct public page popularity, which is the part of the documentation that routine traffic trend tracking depends on.
2. Without administrator logon records the enterprise cannot reconstruct public page popularity, which is the part of the documentation that later incident review depends on.
3. Without administrator logon records the enterprise cannot reconstruct supporting privileged action history, which is the part of the documentation that later incident review depends on.
4. Without administrator logon records the enterprise cannot reconstruct supporting privileged action history, which is the part of the documentation that routine traffic trend tracking depends on.