A retail company has 500 POS terminals across 50 stores. The security team needs to identify any POS terminal that has been replaced or added without authorization. Which discovery technique would most efficiently detect unauthorized POS devices?

Conduct a physical inventory count at each store once a year.

Use an agent on each POS terminal that reports its hardware serial number and software version to a central inventory system daily.

Review purchase orders for POS terminals to see which ones were recently bought.

Scan the network from the corporate office to identify all POS terminals remotely.

A company uses a configuration management database (CMDB) to track server settings. The security team wants to ensure that any new server added to the network is automatically configured with the corporate security baseline. Which integration approach would best achieve this?

Use the CMDB to trigger an automated configuration deployment whenever a new server is discovered.

Block all new servers from the network until the security team manually approves their configuration.

Export the CMDB data to a spreadsheet and share it with the server team for manual configuration.

Require that the CMDB record for each server includes a link to its configuration baseline, and manually verify compliance quarterly.

Which activity is the primary purpose of maintaining an inventory of enterprise assets?

To monitor user activity and detect insider threats in real time

To enforce network segmentation between different departments

To automatically patch all software vulnerabilities without manual intervention

To identify and enumerate all hardware and software assets within the enterprise environment

A company is decommissioning a legacy application server. The asset inventory shows the server is still listed as 'in production' and assigned to a former employee. Which step should be taken first to maintain an accurate inventory?

Change the asset's IP address in the inventory to a placeholder value.

Update the asset record to reflect 'decommissioned' status and reassign ownership to the IT asset manager.

Leave the record unchanged until the next annual inventory review.

Delete the asset record from the inventory entirely.

GIAC Critical Controls Certification

Domain 2Objective 1

Inventory and Control of Enterprise Assets GCCC Practice Questions (Page 9)

Part of the Asset Management and Configuration domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

6concepts

Questions 41–44

41application · medium
A retail company has 500 POS terminals across 50 stores. The security team needs to identify any POS terminal that has been replaced or added without authorization. Which discovery technique would most efficiently detect unauthorized POS devices?
Select an answer first
42application · medium
A company uses a configuration management database (CMDB) to track server settings. The security team wants to ensure that any new server added to the network is automatically configured with the corporate security baseline. Which integration approach would best achieve this?
Select an answer first
43foundation · easy
Which activity is the primary purpose of maintaining an inventory of enterprise assets?
Select an answer first
44application · easy
A company is decommissioning a legacy application server. The asset inventory shows the server is still listed as 'in production' and assigned to a former employee. Which step should be taken first to maintain an accurate inventory?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.