A company has a bring-your-own-device (BYOD) policy that allows employees to use personal laptops for work. The security team wants to ensure that only compliant devices can access corporate resources. Which control would best achieve this without requiring full device management?

Use a network scan to check for compliance before allowing access.

Block all personal devices from accessing corporate resources.

Use conditional access policies that check device compliance before granting access.

Require employees to install a mobile device management (MDM) profile that enforces security policies.

Why is it important to classify assets based on criticality?

To calculate the total cost of all assets

To assign a unique identifier to each asset

To determine the physical location of each asset

To prioritize security controls and resources on the most important assets

What is the primary benefit of integrating asset inventory with configuration management?

Automatically purchasing new hardware when needed

Reducing the number of assets in the environment

Eliminating the need for network monitoring

Ensuring that assets are configured securely and consistently according to established baselines

A company is migrating from a legacy asset inventory system to a new CMDB. During the migration, the team discovers that 20% of assets in the old system are duplicates or outdated. The security team needs to prioritize which assets to migrate first to minimize risk. What is the most effective approach?

Migrate all assets in alphabetical order to ensure a systematic process.

Delete all duplicate and outdated assets before starting the migration to simplify the process.

Migrate all assets at once and clean up duplicates after the migration is complete.

Migrate assets based on criticality classification, starting with those that handle sensitive data or support critical business functions.

A hospital is tracking medical devices for security purposes. A nurse reports that an infusion pump was moved from the ICU to the emergency department. The asset inventory still shows it in the ICU. What is the most important update to make in the asset inventory?

Change the asset's owner to the emergency department head nurse.

Delete the asset from the inventory and re-add it as a new asset in the emergency department.

Update the asset's location field to 'Emergency Department' and record the date of the move.

Mark the asset as 'retired' because it is no longer in its original department.

GIAC Critical Controls Certification

Domain 2Objective 1

Inventory and Control of Enterprise Assets GCCC Practice Questions (Page 6)

Part of the Asset Management and Configuration domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

6concepts

Questions 26–30

26expert · hard
A company has a bring-your-own-device (BYOD) policy that allows employees to use personal laptops for work. The security team wants to ensure that only compliant devices can access corporate resources. Which control would best achieve this without requiring full device management?
Select an answer first
27foundation · easy
Why is it important to classify assets based on criticality?
Select an answer first
28foundation · easy
What is the primary benefit of integrating asset inventory with configuration management?
Select an answer first
29expert · hard
A company is migrating from a legacy asset inventory system to a new CMDB. During the migration, the team discovers that 20% of assets in the old system are duplicates or outdated. The security team needs to prioritize which assets to migrate first to minimize risk. What is the most effective approach?
Select an answer first
30application · medium
A hospital is tracking medical devices for security purposes. A nurse reports that an infusion pump was moved from the ICU to the emergency department. The asset inventory still shows it in the ICU. What is the most important update to make in the asset inventory?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.