問題文
An account's serverless credit consumption has doubled in a week with no announced change. Why should the security team look at this rather than leaving it to the finance team?
選択肢
- Because a jump in consumption always indicates a compromised service user.
- Because serverless features cannot be attributed to a workload, so only the security team has the tools to find the cause.
- Because consumption is billed to the security team's cost center in most organizations, which makes the variance their responsibility to explain even when the cause turns out to be an ordinary workload change.
- An unexplained jump in consumption can be the signal of unauthorized activity, such as an attacker running large extractions or an unapproved workload.