A small IT team manages 1,000 endpoints and spends 10 hours per week manually updating a spreadsheet of installed software. They want to reduce effort and errors. What is the best approach?

Deploy an automated discovery tool that populates the inventory and generates reports on a schedule.

Reduce the number of endpoints tracked to only servers.

Hire a part-time intern to update the spreadsheet more frequently.

Ask users to report software changes via a web form.

Why is it important to track software assets through the retirement stage?

To keep the software running for legacy users

To transfer the software to another organization without any record

To ensure licenses are reclaimed and data is securely removed

To increase the number of active software licenses

What is the purpose of regularly auditing software inventory data?

To delete unused software automatically

To increase the number of software licenses purchased

To assign new software to users

To verify that the inventory accurately reflects the actual software installed on systems

The CIO asks for a report showing which software titles are most widely installed and which are rarely used, to support license renewal decisions. What report should the security team generate?

A usage-based report that combines installation counts with last-used timestamps for each title.

A list of all software versions with their patch status.

A summary of software inventory accuracy scores by business unit.

A report of software purchases by department over the last year.

A company has 500 licenses for a design application but 600 employees have it installed. The IT manager needs to decide whether to buy more licenses or reclaim unused ones. What data is most critical to make this decision?

The total number of installations by department

The purchase date of each license

The version of the application installed on each machine

Actual usage data showing which users have launched the application in the last 90 days

GIAC Critical Controls Certification

Domain 2Objective 2

Inventory and Control of Software Assets GCCC Practice Questions (Page 1)

Part of the Asset Management and Configuration domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 1–5

1application · medium
A small IT team manages 1,000 endpoints and spends 10 hours per week manually updating a spreadsheet of installed software. They want to reduce effort and errors. What is the best approach?
Select an answer first
2foundation · easy
Why is it important to track software assets through the retirement stage?
Select an answer first
3foundation · easy
What is the purpose of regularly auditing software inventory data?
Select an answer first
4application · medium
The CIO asks for a report showing which software titles are most widely installed and which are rarely used, to support license renewal decisions. What report should the security team generate?
Select an answer first
5application · medium
A company has 500 licenses for a design application but 600 employees have it installed. The IT manager needs to decide whether to buy more licenses or reclaim unused ones. What data is most critical to make this decision?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.