問題文
A forensic review must establish what a table looked like before an attacker modified it, and the evidence must remain available after the retention window closes. What should the engineer do?
選択肢
- Request the historical state from Fail-safe, which keeps it for seven more days.
- Reduce the table's retention time so that the modified versions age out and only the original remains, which leaves the clean state as the one the table returns to.
- Create a clone of the table as of a timestamp before the modification and keep the clone under controlled access.
- Rely on the retention window itself, because the historical versions are preserved as part of continuous data protection and remain queryable for as long as the account keeps the table, which makes an explicit copy unnecessary.