Which of the following mitigation principles used to secure information is a true statement? Select two.

Group of answer choices

Comparing the current state of information security with recommended controls is gap analysis.

Applying security measures to reduce unnecessary vulnerabilities is configuration enforcement.

Keeping multiple instances of an attack surface separate is considered segmentation.

Dividing a network into multiple subnets is achieved through address analysis.

Physically locating important devices in secure locations is isolation.