問題文
A team is asked to describe what applying zero trust principles to their backup platform means in practice, rather than as a statement of intent. Which description states the practical form of it correctly?
選択肢
- Every request is logged for review, rights are reviewed each year, and the design assumes that an annual assessment finds the accounts that no longer need them.
- Every request is encrypted in transit, rights are held in the directory, and the design assumes that a strong cipher removes the need to check each request again.
- Every request is verified on its own, rights are cut to the task at hand, and the design assumes that one of the accounts is already in the hands of an attacker.
- Every request is verified at the boundary, rights are granted for the shift, and the design assumes which traffic inside the management network has been checked already.