nerdexam
Isaca

CISM · Question #266

Which of the following is MOST important to integrate into a cybersecurity strategy that supports public cloud, bring your own device (BYOD). and remote work?

The correct answer is C. Zero Trust principles. Zero Trust principles are the most important framework for environments spanning public cloud, BYOD, and remote work because these environments have no definable network perimeter. Zero Trust operates on the premise of 'never trust, always verify' - every user, device, and…

Submitted by suresh_in· Apr 18, 2026Information Security Program Development and Management

Question

Which of the following is MOST important to integrate into a cybersecurity strategy that supports public cloud, bring your own device (BYOD). and remote work?

Options

  • ADevSecOps principles
  • BPolicy acknowledgment requirements
  • CZero Trust principles
  • DRole-based access control (RBAC) requirements

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    24% (5)
  • C
    57% (12)
  • D
    14% (3)

Explanation

Zero Trust principles are the most important framework for environments spanning public cloud, BYOD, and remote work because these environments have no definable network perimeter. Zero Trust operates on the premise of 'never trust, always verify' - every user, device, and request must be authenticated and authorized regardless of location or network. DevSecOps (A) addresses secure development pipelines but not distributed access. Policy acknowledgment (B) is an administrative control with no technical enforcement. RBAC (D) is a component of Zero Trust but not a comprehensive framework on its own. Zero Trust holistically addresses identity, device health, least-privilege access, and continuous validation across all three scenarios.

Topics

#Zero Trust#Cloud Security#BYOD Security#Remote Work Security

Community Discussion

No community discussion yet for this question.

Full CISM Practice