Inventory and Control of Enterprise Assets GCCC Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A multinational company has offices in multiple countries with varying data privacy laws. The security team needs to discover all assets, but some countries restrict active network scanning. Which approach best balances compliance and discovery?

   • AUse only cloud-based discovery tools that do not require network scanning.
   • BPerform active scanning in all countries regardless of local laws to ensure a complete inventory.
   • CSkip asset discovery in countries that restrict scanning to avoid legal issues.
   • DUse agent-based collection where allowed and passive network monitoring in countries that restrict active scanning.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which element is typically recorded as part of asset lifecycle status in an asset inventory?

   • AWhether the asset is in procurement, active, or retired status
   • BThe name of the asset's manufacturer
   • CThe number of users who have accessed the asset
   • DThe IP address of the asset's default gateway
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is preparing for an audit and needs to demonstrate that its asset inventory is accurate. The inventory contains records for 10,000 assets, but the security team suspects some records are outdated. Which process would best validate the inventory?

   • ARun a vulnerability scan and compare results to the inventory.
   • BAsk each department to confirm their assets are listed.
   • CCompare the inventory against active directory and network scan results.
   • DReview the inventory for obvious errors such as duplicate entries.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A university allows students to connect personal laptops to the campus network. The IT security team discovers several unauthorized devices on a research lab subnet that should only contain faculty workstations. Which control would most directly prevent unauthorized devices from joining this subnet?

   • AIncrease the logging level on the lab's DHCP server to record all IP address assignments.
   • BCreate a new VLAN for the lab and move all faculty workstations to it, leaving the old subnet unmanaged.
   • CRun a weekly network scan and manually remove any device that is not on the approved list.
   • DEnable 802.1X port-based authentication on the lab switches, requiring valid faculty credentials before granting network access.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A government agency has a strict policy that only approved laptops can connect to the internal network. An employee brings a personal tablet and connects it to the network to check email. Which control would have prevented this unauthorized device from gaining access?

   • AA weekly audit of DHCP logs to identify devices that are not on the approved list.
   • BA security awareness training that reminds employees not to connect personal devices.
   • CA firewall rule that blocks all traffic from unknown IP addresses.
   • DNetwork Access Control (NAC) that checks device compliance (e.g., presence of an approved certificate) before granting access.
   Reveal Solution Discussion Select an answer first