Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I was in doubts between B and C but if we are following the ISACA taxionomy "BEST Ensure" vs. "FIRST Step". If the question asked "Which of the following is the FIRST step when implementing a BYOD program?", the answer would unequivocally be C (Establish an acceptable use policy). You must define policy and scope before buying or deploying technology. However, the question asks "Which of the following would BEST ensure that users adhere to the security standards?" so MDM (B) provides technical enforcement.
A device management solution (MDM, UEM, or equivalent app-protection/MAM approach) actively enrolls devices, pushes configuration profiles, verifies compliance posture before granting access, enforces encryption and passcode requirements, isolates corporate data, and enables selective wipe or quarantine.
In a BYOD (Bring Your Own Device) environment, the gap between "knowing the rules" and "following the rules" is notoriously wide. To ensure adherence, technical enforcement is always superior to administrative requests.