Inventory and Control of Software Assets GCCC Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is about to renew a subscription for a data analytics platform. The vendor offers a discount if the company can prove that at least 80% of the licenses are actively used. The IT team has usage logs from the platform, but they are stored in a separate system from the software inventory. What should the team do to support the renewal negotiation?

   • AProvide the vendor with the raw usage logs without linking them to specific licenses.
   • BAsk the vendor to accept a simple count of installations as proof of usage.
   • CCorrelate the usage logs with the software inventory to identify which licenses are active and which are dormant.
   • DRenew the current license count to avoid the effort of analyzing usage data.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an example of a software inventory report?

   • AA network diagram showing physical connections
   • BA financial statement of the company
   • CA list of employee names and their job titles
   • DA list of all installed applications with versions and license counts
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company has 500 licenses for a graphics suite, but the vendor's audit shows 550 installations. The IT team has usage data showing that 100 installations have not been used in over a year. The CFO wants to reduce license costs but also wants to avoid a compliance penalty. Which action best balances compliance and cost?

   • AUninstall all 100 unused installations and immediately report the new count to the vendor.
   • BPurchase 50 additional licenses to cover the excess installations and keep all 550 installed.
   • CIgnore the audit and keep the current installations, since the usage data shows many are unused.
   • DUse the usage data to identify and uninstall the 50 unused installations that exceed the license count, then negotiate a lower license count with the vendor.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security team needs to inventory software on a mix of Windows, Linux, and macOS systems. Some systems are virtual machines that are only powered on occasionally. Which discovery method provides the most complete coverage?

   • AManual inventory using a spreadsheet updated by each system administrator.
   • BScanning only the hypervisor hosts to infer guest software.
   • CAgent-based discovery installed on all systems, including VMs, that reports when the system is powered on.
   • DAgentless network scanning that runs continuously from a central scanner.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has separate software inventory tools for Windows, Linux, and cloud environments. The security team wants a single view for reporting and compliance. Which approach would best achieve centralization without losing the specialized capabilities of each tool?

   • AKeep the tools separate and export reports manually to a shared folder each month.
   • BUse an API or integration layer to feed data from each specialized tool into a central CMDB or inventory platform.
   • CChoose one environment's tool as the master and migrate all other data into it.
   • DReplace all specialized tools with one generic agentless scanner that covers all environments.
   Reveal Solution Discussion Select an answer first