フリー問題

問題文

A team has to answer whether an incident could have started from the internet. Which risk area provides the most direct answer?

選択肢

1. Secure configuration, because the settings on a resource determine everything about it.
2. Vulnerability management, because a defect is what an attacker would have used and the presence of a defect on the resource therefore establishes that the resource could be reached and entered from outside the environment.
3. Malware, because an artifact would have been left behind somewhere on the resource.
4. External exposure, because it states whether a usable path from outside existed.