問題文
An operations team must set the interval at which devices fetch detection content. One environment carries payment traffic under strict change control and the other is a general office network. How should the intervals differ?
選択肢
- The office network should use a long interval, because its traffic is less critical to the business than the payment traffic in the other environment.
- Both should be short because detection content does not change what the policy permits, and the change control concern applies to configuration rather than to detection data.
- The payment environment should use a long interval with manual testing, because any change to a device that carries payment traffic falls under the same change control process as a configuration change and therefore has to be tested before it is applied to production.
- Both should be long, so that any unexpected detection can be traced to a known update, and, so that the change record for each of the environments shows a single entry for the content in force during the whole period.