問題文
A provider sets trace_level to a value other than OFF in the manifest so that the app records timings. A reviewer flags this as a possible disclosure risk. What is the basis for that concern?
選択肢
- Enabling tracing can expose calls to hidden stored procedures to any user in the consumer account who can read the event table.
- Enabling tracing writes the body of each procedure into the event table, so the whole implementation becomes readable.
- Enabling tracing turns off the redaction that normally applies to the query profile, so the consumer sees the full profile tree for the app's queries.
- Enabling tracing shares the events with the provider automatically, so consumer data can leave the account without the consumer knowing.