A university has a research network where students are allowed to connect personal devices. However, the security team wants to prevent unauthorized devices from accessing sensitive research data. Which control would be most effective without completely blocking student devices?

Block all personal devices from the network entirely.

Require all personal devices to be registered with the IT department before connecting.

Implement network segmentation so that student devices are on a separate VLAN with restricted access to sensitive data.

Allow personal devices but monitor their traffic for suspicious activity.

A hospital has a mix of IoT medical devices (infusion pumps, monitors) and traditional IT equipment. The security team wants to prevent unauthorized devices from connecting to the network, but the IoT devices cannot run agents and have limited management capabilities. Which control strategy would best balance security and operational needs?

Segment IoT devices onto a separate network with strict access controls, and use network scanning to identify new devices.

Disable the network ports in patient rooms to prevent any device from connecting.

Require all IoT devices to be manually registered before connecting.

Use MAC address filtering to allow only known devices.

A university allows students to connect personal devices to the campus network. The IT department wants to prevent unauthorized devices from accessing sensitive administrative systems while still allowing internet access for students. Which control would best achieve this?

Install an agent on every personal device to enforce security policies.

Require students to register their devices with IT before connecting.

Block all personal devices from the network entirely.

Use network access control (NAC) to place personal devices on a separate VLAN with restricted access.

A company has a policy that only approved software may be installed on endpoints. The security team wants to enforce this policy and detect violations. Which combination of controls would be most effective?

Use network scanning to detect software installations.

Use application allowlisting and regularly compare installed software to the inventory.

Require users to sign a policy acknowledgment and perform no technical controls.

Use application blocklisting and rely on user reporting of violations.

In the context of enterprise asset management, what does the term 'enterprise asset' typically refer to?

Only assets that are critical to business operations

Only software applications that are licensed by the organization

Only physical devices that are connected to the corporate network

Any hardware or software component that is owned or used by the organization

GIAC Critical Controls Certification

Domain 2Objective 1

Inventory and Control of Enterprise Assets GCCC Practice Questions (Page 1)

Part of the Asset Management and Configuration domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

6concepts

Questions 1–5

1expert · hard
A university has a research network where students are allowed to connect personal devices. However, the security team wants to prevent unauthorized devices from accessing sensitive research data. Which control would be most effective without completely blocking student devices?
Select an answer first
2expert · hard
A hospital has a mix of IoT medical devices (infusion pumps, monitors) and traditional IT equipment. The security team wants to prevent unauthorized devices from connecting to the network, but the IoT devices cannot run agents and have limited management capabilities. Which control strategy would best balance security and operational needs?
Select an answer first
3application · medium
A university allows students to connect personal devices to the campus network. The IT department wants to prevent unauthorized devices from accessing sensitive administrative systems while still allowing internet access for students. Which control would best achieve this?
Select an answer first
4application · medium
A company has a policy that only approved software may be installed on endpoints. The security team wants to enforce this policy and detect violations. Which combination of controls would be most effective?
Select an answer first
5foundation · easy
In the context of enterprise asset management, what does the term 'enterprise asset' typically refer to?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.