Question $3$

$1pts$

In a zero$-$trust model, it is sufficient for the web server to use an $509$ certificate as long as the clients authenticate over HTTP with a username and password. $q,$

False. $509$ certifications are not sufficient to provide authentication. $q,$

False. Access to all resources requires authentication in the zerotrust model. $q,$

False. Usernames and passwords should never be used in the zero$-$trust model. $q,$

True. The web server is the only resource that requires authentication, and $509$ certificates are adequate.