What is the primary goal of asset tracking and maintenance in an enterprise environment?

To ensure that all assets are stored in a centralized physical location

To automatically decommission all assets that are no longer used

To assign a unique identifier to every asset only at the time of purchase

To keep the asset inventory up to date by recording changes, ownership, and lifecycle status

A company has an asset inventory that is updated manually. An auditor finds that the inventory is 30% inaccurate, with many assets missing or incorrectly attributed. The security team must improve accuracy quickly. Which approach is most effective in the short term?

Deploy an automated discovery tool that scans the network and reconciles findings with the existing inventory.

Ignore the inaccuracies and focus on new assets going forward.

Hire additional staff to manually verify each asset in the inventory.

Ask each department to submit a list of their assets and compare it to the inventory.

Which control is commonly used to prevent unauthorized devices from connecting to a wired network?

Employee security awareness training

A company has a large number of remote employees who connect via VPN. The security team wants to ensure that all remote devices are included in the asset inventory. Which discovery method would be most effective for these remote devices?

Ask remote employees to fill out a spreadsheet with their device information.

Use DHCP logs from the VPN concentrator to identify devices.

Require an inventory agent to be installed on all remote devices.

Run a network scan of the VPN address pool.

A software company uses an asset inventory that lists all servers and their owners. The security team wants to ensure that every server is configured with the company's security baseline (e.g., disabled USB ports, specific password policy). Which integration would most effectively achieve this?

Perform a manual audit of each server once a year using a checklist.

Link the asset inventory to the configuration management database (CMDB) and use configuration drift reports to identify servers that deviate from the baseline.

Require all server owners to submit a screenshot of their server's settings every quarter.

Send a monthly email to all server owners asking them to confirm their servers meet the baseline.

GIAC Critical Controls Certification

Domain 2Objective 1

Inventory and Control of Enterprise Assets GCCC Practice Questions (Page 2)

Part of the Asset Management and Configuration domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

6concepts

Questions 6–10

6foundation · easy
What is the primary goal of asset tracking and maintenance in an enterprise environment?
Select an answer first
7expert · hard
A company has an asset inventory that is updated manually. An auditor finds that the inventory is 30% inaccurate, with many assets missing or incorrectly attributed. The security team must improve accuracy quickly. Which approach is most effective in the short term?
Select an answer first
8foundation · easy
Which control is commonly used to prevent unauthorized devices from connecting to a wired network?
Select an answer first
9application · medium
A company has a large number of remote employees who connect via VPN. The security team wants to ensure that all remote devices are included in the asset inventory. Which discovery method would be most effective for these remote devices?
Select an answer first
10application · medium
A software company uses an asset inventory that lists all servers and their owners. The security team wants to ensure that every server is configured with the company's security baseline (e.g., disabled USB ports, specific password policy). Which integration would most effectively achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.