A manufacturing company is preparing for a security audit. The audit will require a complete list of all hardware, software, and data assets, including their location, owner, and classification. The company has never maintained a formal inventory. Which of the following is the most appropriate first step to establish this inventory?

Use the configuration management database (CMDB) if one exists, and update it with any missing assets

Deploy an automated discovery tool to scan the network and identify all connected devices and installed software

Combine automated network scanning with manual input from asset owners to create a comprehensive inventory

Interview each department manager to manually list all assets they believe are in use

A multinational corporation is merging with another company. The security team is tasked with integrating the two companies' asset inventories. The two companies use different classification schemes and have overlapping asset types. The merger requires a unified inventory to support risk management and compliance reporting. Which of the following is the most critical first step in this integration?

Conduct a physical inventory of all facilities to verify the asset lists

Assign new asset owners from the acquiring company to all assets

Map the two classification schemes to a common taxonomy

Merge the two databases into a single database as quickly as possible

What is the purpose of classifying an asset during its lifecycle in asset management?

To assign a level of sensitivity that determines the required protection controls

To track the asset's physical location only

To assign an owner for the asset

To determine the asset's monetary value for insurance

Certified Information Systems Security Professional

Domain 2Objective 3

2.3 - Provision Information and Assets Securely CISSP Practice Questions (Page 5)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

3concepts

10%of the exam

Questions 21–24

21application · medium
A manufacturing company is preparing for a security audit. The audit will require a complete list of all hardware, software, and data assets, including their location, owner, and classification. The company has never maintained a formal inventory. Which of the following is the most appropriate first step to establish this inventory?
Select an answer first
22expert · hard
A multinational corporation is merging with another company. The security team is tasked with integrating the two companies' asset inventories. The two companies use different classification schemes and have overlapping asset types. The merger requires a unified inventory to support risk management and compliance reporting. Which of the following is the most critical first step in this integration?
Select an answer first
23application · medium
A government agency has a policy that all employees must use a smart card to access the building and their computers. The security team is responsible for issuing and managing the smart cards. Which of the following best describes the security team's role in relation to the smart cards?
Select an answer first
24foundation · easy
What is the purpose of classifying an asset during its lifecycle in asset management?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

2.3 - Provision Information and Assets Securely CISSP Practice Questions (Page 5)

Questions 21–24

A government agency has a policy that all employees must use a smart card to access the building and their computers. The security team is responsible for issuing and managing the smart cards. Which of the following best describes the security team's role in relation to the smart cards?

What is the purpose of classifying an asset during its lifecycle in asset management?

Keep studying — Asset Security