Which of the following is the MOST important consideration when implementing a Zero Trust strategy for mobile, wireless, and Internet of Things (IoT) devices?

The correct answer is A. Validating the identity of all devices and users before granting access to resources. The core principle of a Zero Trust strategy is “never trust, always verify.” Therefore, continuously validating the identity and security posture of all users and devices - especially mobile, wireless, and IoT devices - before granting access is the most critical consideration to

Submitted by lucia.co· Apr 18, 2026Protection of Information Assets

Question

Options

AValidating the identity of all devices and users before granting access to resources
BFocusing on user training and awareness to prevent phishing attacks
CImplementing strong encryption protocols for data in transit and at rest
DEnsuring the latest firmware updates are applied regularly to all devices

How the community answered

(34 responses)

A
91% (31)
C
6% (2)
D
3% (1)

Explanation

The core principle of a Zero Trust strategy is “never trust, always verify.” Therefore, continuously validating the identity and security posture of all users and devices - especially mobile, wireless, and IoT devices - before granting access is the most critical consideration to maintain a secure Zero Trust environment.

Topics

#Zero Trust#Identity and Access Management#Mobile Security#IoT Security

Community Discussion

No community discussion yet for this question.

Full CISA Practice