Which of the following are effective countermeasures against passive network-layer attacks?

Federated security and authenticated access controls address identity and authorization concerns, which are countermeasures against active attacks or unauthorized access rather than passive interception of network traffic.

Trusted software development and runtime integrity controls defend against software tampering and malicious code execution, targeting the computing environment rather than passive network-layer eavesdropping.

Passive network-layer attacks involve intercepting and monitoring traffic without altering it, meaning the attacker gains value by reading the data in transit. Encryption renders intercepted data unreadable, directly neutralizing the threat, while security-enabled applications enforce encrypted communications protocols (e.g., TLS) to prevent data exposure at the network layer.

Enclave boundary protection and computing environment defense focus on perimeter and host-level security controls, which do not directly prevent an attacker from passively capturing and reading unencrypted data traversing the network.