正解:B
The most important database version issue is whether the version is still supported by the vendor.
Unsupported database software may no longer receive security patches, bug fixes, compatibility updates, or technical support. This creates significant operational, cybersecurity, compliance, and availability risk. Using the most recent version is not always necessary because organizations may deliberately delay upgrades until stability and compatibility are confirmed. A recent upgrade does not automatically mean the version is secure or supported. Restricting access to version information may reduce reconnaissance risk, but it is secondary to vendor support status. Internal audit should review version support, patch management, upgrade planning, known vulnerabilities, and compensating controls. Therefore, Option B is correct.