問題文
A network manager reads that this model removes the perimeter and concludes the corporate firewalls can be decommissioned. What does the standard actually say about how the model is defined?
選択肢
- Firewalls and other perimeter defenses must be retained unchanged, because the model adds new controls without altering the existing ones.
- Perimeter defenses become unnecessary once every resource sits behind an enforcement point, because the enforcement point performs the same filtering.
- The standard defines the model as the absence of any trust zone, which means that a perimeter can remain as a physical artifact but must not appear anywhere in the policy that governs access.
- Many definitions stress removing wide-area perimeter defenses, but the standard chooses to define the model by the basic tenets that should be involved rather than by what is excluded.