Inventory and Control of Enterprise Assets GCCC Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A hospital has a mix of wired and wireless medical devices. Some devices (e.g., infusion pumps) are not 802.1X capable, while others (e.g., laptops) are. The security team wants to prevent unauthorized devices from joining the network while ensuring medical devices remain functional. What is the best approach?

   • ARequire all medical devices to be upgraded to 802.1X-capable models before connecting to the network.
   • BImplement 802.1X for capable devices and use MAC address filtering for non-802.1X devices on a separate VLAN.
   • CUse only MAC address filtering for all devices, including laptops.
   • DDisable 802.1X entirely and rely on network segmentation to isolate medical devices.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A manufacturing company has a mix of assets: a PLC controlling a robotic arm, a file server with HR records, a build server for CI/CD, and a receptionist's PC. The security team has limited resources and must prioritize patching. Which asset should receive the highest priority for security controls?

   • AThe receptionist's PC, because it is the most exposed to email phishing attacks.
   • BThe build server for CI/CD, because a compromise could inject malicious code into software releases.
   • CThe PLC controlling the robotic arm, because a compromise could cause physical safety incidents and production downtime.
   • DThe file server with HR records, because it contains sensitive personal data subject to privacy regulations.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company uses a CMDB to track server configurations. During an audit, they find that several servers have drifted from their approved baseline. The security team wants to prevent future drift and ensure that any configuration change is tracked. Which approach would best achieve this?

   • APerform a monthly manual review of server configurations against the baseline.
   • BRequire manual approval for all configuration changes and update the CMDB after approval.
   • CUse the CMDB to automatically revert any configuration change that does not match the baseline.
   • DIntegrate the CMDB with a configuration management tool that enforces the baseline and logs all changes.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A company has a limited security budget and must decide which assets to protect first. They have a web server that is public-facing, an internal file server with employee records, and a development server with no production data. Which classification and prioritization approach is most defensible?

   • AClassify the development server as highest priority because it is less protected.
   • BClassify all three as equal priority to avoid bias.
   • CClassify the web server as highest priority because it is public-facing.
   • DClassify the file server as highest priority because it contains sensitive employee records.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A large enterprise has a mix of on-premises servers, cloud VMs, and employee-owned devices (BYOD) that access corporate resources. The security team must create a complete asset inventory but faces constraints: agents cannot be installed on BYOD devices, and cloud VMs are ephemeral. Which strategy best balances completeness and practicality?

   • APerform a single network scan of the entire corporate network and cloud environment to identify all assets.
   • BRely on DHCP logs and DNS records to identify all devices, including cloud VMs and BYOD.
   • CUse cloud provider APIs to enumerate cloud VMs, active scanning for on-premises servers, and mobile device management (MDM) for BYOD devices.
   • DInstall agents on all on-premises servers and cloud VMs, and require BYOD users to install a lightweight agent.
   Reveal Solution Discussion Select an answer first