For the purpose of classification, which of the following is used to divide trust domain and trust boundaries?

Network architecture defines the physical and logical layout of a network, including segmentation, zones, and perimeters that establish trust domains (groups of entities sharing the same level of trust) and trust boundaries (the points where trust levels change). By designing network segments such as DMZs, internal zones, and external zones, network architecture directly controls where trust is granted or restricted. This structural approach is the foundational mechanism for classifying and enforcing trust relationships across a system.

Integrity is a security property (ensuring data has not been altered), not a structural mechanism used to divide or classify trust domains and boundaries.

Identity Management manages authentication and authorization of users and entities, but it operates within trust boundaries rather than defining or dividing the boundaries themselves.

Confidentiality management focuses on protecting data from unauthorized disclosure and is a data-centric control, not a structural mechanism for partitioning trust domains.