Inventory and Control of Enterprise Assets GCCC Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which factor is most commonly used to determine the criticality of an asset?

   • AThe number of users who have administrative access
   • BThe age of the asset
   • CThe color of the asset's physical label
   • DThe impact on business operations if the asset is compromised or unavailable
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company with 5,000 endpoints uses an agent-based asset inventory tool. During a quarterly review, the security team finds that 200 endpoints have not reported inventory data for over 30 days. The team suspects these are rogue devices or systems with broken agents. Which approach would most reliably identify whether these 200 endpoints are actually present on the network?

   • AReinstall the agent on all 200 endpoints remotely using the existing management console.
   • BCheck the firewall logs for traffic from the IP addresses previously assigned to the missing endpoints.
   • CRun an authenticated network scan of all internal subnets and compare the results to the agent-reported inventory.
   • DReview DHCP lease logs to see if the missing endpoints have recently obtained IP addresses.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A cloud service provider hosts customer workloads on shared infrastructure. The security team needs to classify assets to prioritize monitoring. Which asset should be classified as highest criticality?

   • AA customer-facing web application that processes payment card data and is subject to PCI DSS.
   • BA backup storage system that holds encrypted copies of all customer data.
   • CAn internal development server used for testing new features.
   • DA monitoring server that collects logs and metrics from all systems.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A small business with no existing asset inventory wants to quickly identify all devices connected to its network. The environment includes both Windows and Linux servers, plus employee laptops. Which discovery approach would provide the most complete initial inventory with the least manual effort?

   • ARun an unauthenticated network scan of all subnets.
   • BAsk employees to manually report their device information.
   • CDeploy an agent to every known device and wait for reports.
   • DUse a combination of network scanning and agent-based collection.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company uses a configuration management tool that already tracks servers and their configurations. The security team wants to extend this to include network devices such as routers and switches. Which discovery method would be most appropriate?

   • ARun a network scan of the management network.
   • BManually add network devices to the inventory.
   • CUse SNMP-based discovery to identify and inventory network devices.
   • DUse the configuration management tool's agent on network devices.
   Reveal Solution Discussion Select an answer first