Question $10(1$ point$)$

Capital District Transportation Authority $($CDTA$)$ operates a transportation systems facing the risk of cyberattacks that could disrupt traffic flow or compromise sensitive passenger data. CDTA is considering various cybersecurity measures, including adopting an assume$-$breach security model.

Which of the following best describes the principle of assume breach in the context of critical infrastructure protection?

Assume breach involves adopting a zero$-$trust security architecture, where no user or device should be inherently trusted, requiring continuous verification and authentication before granting access to any system or resource.

Assume breach emphasizes the importance of implementing strong access controls based on the principle of least privilege, granting users only the minimum level of access necessary for their authorized tasks.

Assume breach advocates that a breach has already occurred and continuously monitoring and responding to potential threats, regardless of their source.