問題文
A university runs an open network where visitors and unmanaged devices are common, and most of its applications are hosted services it cannot install its own components into. Which of the three architectural approaches fits best?
選択肢
- Micro-segmentation, since placing gateway devices in front of each resource does not require anything to be installed on the devices that visitors bring with them.
- Enhanced identity governance, since network access is granted broadly while resource access is restricted to identities holding the right privileges.
- A hybrid of micro-segmentation and the network infrastructure approach, because combining a gateway in front of each resource with an overlay network covers both managed and unmanaged devices.
- The network infrastructure approach, since an overlay network can carry visitor traffic without changing the campus network.