ISC Leadership And Organizational Management Practice Question
An organization is migrating to a hybrid cloud environment and is updating its security architecture. Which of the following is the MOST effective way to ensure consistent security policy enforcement across both on-premises and cloud environments?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implementing a unified security policy framework across all environments.
Implementing a unified security policy framework ensures that security requirements are standardized and consistently applied regardless of the underlying infrastructure. This approach reduces complexity and human error in policy management.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Managing separate security policies for on-premises and cloud environments.
Why it's wrong here
Managing separate policies creates inconsistencies and increases the likelihood of security gaps and administrative burden.
- ✗
Prioritizing the security of on-premises assets over cloud assets.
Why it's wrong here
Security should be applied consistently based on risk, not based on the location of the assets.
- ✗
Allowing individual departments to define their own security policies.
Why it's wrong here
Allowing decentralized policy definition leads to inconsistencies, non-compliance, and increased risk, as individual departments often lack the necessary security expertise.
- ✓
Implementing a unified security policy framework across all environments.
Why this is correct
A unified policy framework provides a consistent set of rules and controls, which simplifies management and auditing while reducing the risk of configuration errors.
About these practice questions
One of 219 original ISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.