How are trust exploitation attacks mitigated in the SAFE SMR midize network design corporate Internet module?

How are trust exploitation attacks mitigated in the SAFE SMR midize network design corporate
Internet module?

A.
filtering at the ISP, edge router, and corporate firewall

B.
IDS at the host and network levels

C.
OS and IDS detection

D.
restrictive trust model and private VLANs

E.
restrictive filtering and host IDS