問題文
An agency's existing network security baseline assumed the inside of the perimeter was trusted. How does the guidance describe the relationship between the updated baseline and this architecture?
選択肢
- The updated baseline defines capabilities that may be applied at any appropriate enforcement point along a data flow instead of at a single point at the perimeter, and many of them directly support this architecture.
- The updated baseline is incompatible with this architecture, since it retains the assumption that the inside of the perimeter is trusted.
- The updated baseline applies only to the perimeter while this architecture applies only inside it, so the two divide the environment between them and a line has to be drawn somewhere.
- The updated baseline replaces this architecture for agencies subject to it, since a network-level baseline and an architecture cannot both govern the same data flow.