In which two ways should companies modernize their security philosophies? (Choose two.)

Expanding IT departments is an organizational staffing decision and does not represent a philosophical shift in how security is architected or applied.

Decreasing internal access and reporting reduces visibility into the network, which is the opposite of what modern security philosophies recommend.

Complementing threat-centric tactics with trust-centric methods reflects the Zero Trust security philosophy, which requires verifying every user and device regardless of network location. This dual approach addresses insider threats and lateral movement that purely threat-centric models miss.

Reinforcing threat-centric security tactics remains foundational because detecting, blocking, and responding to known attack patterns is still essential. Modern security strategy builds on this foundation rather than abandoning it.

Rebuilding security portfolios with entirely new solutions is a procurement strategy, not a philosophical modernization - it does not inherently shift from reactive to trust-based security thinking.