CompTIA SecurityX (CAS-005) CAS-005 — Question 340

A security architect is designing Zero Trust enforcement policies for all end users. The majority of users work remotely and travel frequently for work. Which of the following controls should the security architect do first?