A company's software inventory currently includes only commercial applications installed on workstations. The security team wants to expand the inventory to cover all software assets. Which additional items should be included to meet the definition of a complete software inventory?

Only software that is currently being used by at least one employee.

Open-source tools, browser extensions, firmware on network devices, and software installed on servers.

Only software that is visible in the Add/Remove Programs list of Windows workstations.

Only applications that have a license cost associated with them.

A company has multiple inventory tools that produce conflicting data about the same software. The security team wants to establish a single source of truth for compliance reporting. What is the most effective approach?

Keep the tools separate and manually decide which data to use for each report.

Average the data from all tools to create a compromise inventory.

Use the tool that reports the highest number of installations as the source of truth.

Designate one tool as the authoritative source and integrate the others to feed into it, with reconciliation rules to resolve conflicts.

A security team needs to inventory software on a network that includes both managed corporate devices and unmanaged BYOD devices. The BYOD devices are not allowed to have agents installed. What is the best way to achieve a reasonably complete inventory?

Require BYOD users to install an agent as a condition of network access.

Only inventory managed devices and exclude BYOD from the inventory.

Use agentless network scanning to discover software on BYOD devices, and agent-based discovery for managed devices.

Use only agentless scanning for all devices, including managed ones.

A company's CMDB contains software records that were manually entered over several years. A new automated discovery tool is being deployed. The security team is concerned that the automated tool may overwrite important manual data, such as license ownership and support contracts. What is the best approach to reconcile the two data sources?

Run the discovery tool in parallel for a year before making any changes to the CMDB.

Configure the discovery tool to update only the fields it is authoritative for, and preserve manual fields through a defined reconciliation process.

Let the discovery tool overwrite all fields, since automated data is more accurate than manual data.

Keep the manual CMDB as the master and ignore the discovery tool's data.

Which of the following is an example of an agentless software discovery method?

Asking users to run a script that uploads their installed programs list

Using Windows Management Instrumentation (WMI) to query software data over the network

Reading the Windows registry on a local machine via a logged-in user session

Deploying a client application to each workstation that reports to a central server

GIAC Critical Controls Certification

Domain 2Objective 2

Inventory and Control of Software Assets GCCC Practice Questions (Page 7)

Part of the Asset Management and Configuration domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

10concepts

Questions 31–35

31application · medium
A company's software inventory currently includes only commercial applications installed on workstations. The security team wants to expand the inventory to cover all software assets. Which additional items should be included to meet the definition of a complete software inventory?
Select an answer first
32expert · hard
A company has multiple inventory tools that produce conflicting data about the same software. The security team wants to establish a single source of truth for compliance reporting. What is the most effective approach?
Select an answer first
33expert · hard
A security team needs to inventory software on a network that includes both managed corporate devices and unmanaged BYOD devices. The BYOD devices are not allowed to have agents installed. What is the best way to achieve a reasonably complete inventory?
Select an answer first
34expert · hard
A company's CMDB contains software records that were manually entered over several years. A new automated discovery tool is being deployed. The security team is concerned that the automated tool may overwrite important manual data, such as license ownership and support contracts. What is the best approach to reconcile the two data sources?
Select an answer first
35foundation · easy
Which of the following is an example of an agentless software discovery method?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.