Study. uk . com
  1. Home
  2. All questions
  3. Question 212

CISSP study material · question 212 of 500

An enterprise allows staff to reach its resources from their own phones. Under the first zero trust tenet, how may those phones be treated?

  1. As subjects rather than assets, since their owner is an employee.
  2. As resources in their own right, since they can access enterprise-owned resources.
  3. As enforcement points, since they mediate access to the resource.
  4. As out of scope, since the enterprise does not own them.
Show the answer

Answer: B. As resources in their own right, since they can access enterprise-owned resources.

The first tenet counts all data sources and computing services as resources, and notes an enterprise may classify personally owned devices as resources when they can access enterprise resources.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 2.1 Tenets of Zero Trust, tenet 1

Challenge yourself on this topic → Study as cards