問題文
A bank has to show that its clusters follow an internal hardening standard that no regulator publishes. What can the compliance feature be measured against?
選択肢
- A benchmark built from custom alert definitions, because the bases of a benchmark are limited to the standard rules and the published best practices of the product.
- An audit event filter, because the events of the past day are what the compliance side reads when it decides whether a given object complies.
- A configuration template applied to the clusters, because the compliance side reads the desired values out of the template that was assigned to each of the objects in the inventory.
- A regulatory benchmark that comes with the product, because an internal standard has to be mapped onto one of the published sets of rules before it can be used.