Which security mechanism(s) defines the boundary between security critical and non-critical parts
of an information system?

A.
Trusted Computing Base

B.
Encryption

C.
Authentication, Authorization, and Auditing

D.
Defense-in-Depth