A company is implementing a new asset management system. The system will be used to track all hardware and software assets. The company wants to ensure that the system is accurate and up to date. Which of the following is the most effective way to maintain the accuracy of the asset inventory?

Conduct a physical audit of all assets on an annual basis

Integrate the asset management system with the procurement and IT service management processes

Require all employees to report any new hardware or software they acquire

Use a spreadsheet that is updated by the IT manager

What is the primary purpose of maintaining an asset inventory in an organization?

To track only tangible assets like hardware

To replace the need for risk assessments

To provide a complete list of all assets that need to be protected and managed

To ensure all assets are publicly disclosed

A company is implementing a bring-your-own-device (BYOD) policy. The security team needs to ensure that corporate data on personal devices is protected. Which of the following is the most appropriate control to implement?

Provide employees with a separate corporate-owned device

Require employees to use a mobile device management (MDM) solution that can enforce encryption and remote wipe

Prohibit employees from using personal devices for work purposes

Require employees to sign an acceptable use policy (AUP)

A healthcare organization is decommissioning a server that contained protected health information (PHI). The server is being replaced and will be returned to the leasing company. Which of the following is the most important action to take before returning the server?

Perform a full backup of the server's data to an encrypted storage device

Reinstall the operating system to overwrite the previous data

Use a certified data sanitization process to securely erase all data from the hard drives

Remove the hard drives and physically destroy them

Certified Information Systems Security Professional

Domain 2Objective 3

2.3 - Provision Information and Assets Securely CISSP Practice Questions (Page 4)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

3concepts

10%of the exam

Questions 16–20

16application · medium
A company is implementing a new asset management system. The system will be used to track all hardware and software assets. The company wants to ensure that the system is accurate and up to date. Which of the following is the most effective way to maintain the accuracy of the asset inventory?
Select an answer first
17foundation · easy
What is the primary purpose of maintaining an asset inventory in an organization?
Select an answer first
18application · medium
A company is implementing a bring-your-own-device (BYOD) policy. The security team needs to ensure that corporate data on personal devices is protected. Which of the following is the most appropriate control to implement?
Select an answer first
19foundation · easy
Which of the following is an example of an intangible asset that should be included in an asset inventory?
Select an answer first
20application · medium
A healthcare organization is decommissioning a server that contained protected health information (PHI). The server is being replaced and will be returned to the leasing company. Which of the following is the most important action to take before returning the server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.