A company wants to understand the potential impact of a server failure on business operations. They need to identify which applications depend on that server and what data flows through it. Which technique should they use?

Review the server's hardware specifications to estimate its processing capacity.

Create a dependency map that shows connections between the server, applications, and data flows.

Ask the server administrator to list all users who have logged in recently.

Check the server's uptime history to predict future failures.

A company has a CMDB that is updated manually. They are experiencing frequent discrepancies between the CMDB and the actual network. They want to reduce these discrepancies without overburdening IT staff. Which approach is most effective?

Limit network access to only devices that are already in the CMDB.

Require IT staff to update the CMDB after every change they make.

Perform a full manual audit of the network every month.

Implement automated discovery tools that run continuously and reconcile with the CMDB.

A hospital network has a mix of IoT medical devices, workstations, and servers. The security team needs a complete, up-to-date inventory but cannot install agents on many legacy medical devices. Which approach best meets this need?

Install agents on all devices, including legacy medical devices, to ensure uniform data collection.

Rely on the existing CMDB entries, as they are already maintained by the IT department.

Use only a network scanner to identify all devices, since it does not require agents.

Deploy an agent-based inventory tool on all devices that support it, and use network scanning for the rest.

Which tool is specifically designed to maintain a centralized record of configuration items, their attributes, and relationships across an organization?

Configuration Management Database (CMDB)

Dell NIST Cybersecurity Framework v2.0

Domain 3Objective 4

List the Tools and Techniques Used in Asset Management. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Part of the NIST Framework: IDENTITY Function domain, which accounts for 18% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

32questions here

7free pages

7concepts

18%of the exam

Questions 1–5

1foundation · easy
Which asset classification attribute indicates how essential an asset is to the continued operation of the business?
Select an answer first
2application · medium
A company wants to understand the potential impact of a server failure on business operations. They need to identify which applications depend on that server and what data flows through it. Which technique should they use?
Select an answer first
3expert · hard
A company has a CMDB that is updated manually. They are experiencing frequent discrepancies between the CMDB and the actual network. They want to reduce these discrepancies without overburdening IT staff. Which approach is most effective?
Select an answer first
4application · medium
A hospital network has a mix of IoT medical devices, workstations, and servers. The security team needs a complete, up-to-date inventory but cannot install agents on many legacy medical devices. Which approach best meets this need?
Select an answer first
5foundation · easy
Which tool is specifically designed to maintain a centralized record of configuration items, their attributes, and relationships across an organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.