Which three are industry best practices of Zero Trust framework? (Choose three.)

A. Employee machines need to have a passcode profile setup

B. Employee machines on Internal network are trusted and have access to all internal resources

C. Employee machines are checked for compliance before they get access to applications

D. Employees are not required to provide MFA to access internal resources over VPN

E. Employees get access to only the required resources to get their job done