A healthcare organization is required to retain patient records for 10 years. The organization is migrating to a new electronic health record (EHR) system and wants to ensure the old records remain accessible and unalterable. The organization has a limited IT budget. Which approach is most cost-effective and compliant?

Export the records to a standard format and store them on a network share with access controls.

Keep the old EHR system running solely for archival access.

Print all records and store them in a secure physical location.

Use a cloud-based archival service that offers WORM storage and searchable access.

What is the purpose of archival and retention requirements in asset management?

To preserve data for the required period and ensure it remains accessible when needed

To ensure data is backed up daily

To delete data immediately after use to save storage space

To encrypt all data at rest and in transit

A company has implemented a new asset management system. The security team must ensure that all hardware and software assets are tracked and that licenses are compliant. Which action is most important for maintaining an accurate inventory?

Relying on employee self-reporting of new hardware and software.

Updating the inventory only when a major change occurs.

Conducting a physical inventory count of all hardware assets annually.

Using an automated discovery tool to scan the network and identify all connected devices and software.

A company is replacing its legacy file server with a new cloud-based storage solution. The legacy server contains sensitive customer data that must be preserved for regulatory compliance. The server is at end of life and must be decommissioned. Which sequence of actions is most appropriate?

Keep the legacy server running indefinitely to avoid the decommissioning process.

Securely wipe the legacy server's drives first, then migrate the data.

Migrate the data to the new cloud storage, verify the migration, then securely wipe the legacy server's drives.

Decommission the server without migrating the data, assuming it is backed up.

Why is maintaining an accurate inventory of hardware, software, and data assets important for an organization?

It guarantees that all software is free of vulnerabilities

It enables effective management, security, and compliance tracking

It eliminates the need for risk assessments

It ensures that hardware never needs maintenance

Systems Security Certified Practitioner

Domain 1Objective 5

1.5 - Support and Implement Asset Management Lifecycle (i.e., Hardware, Software, and Data) SSCP Practice Questions (Page 2)

Part of the Security Concepts and Practices domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

16%of the exam

Questions 6–10

6expert · hard
A healthcare organization is required to retain patient records for 10 years. The organization is migrating to a new electronic health record (EHR) system and wants to ensure the old records remain accessible and unalterable. The organization has a limited IT budget. Which approach is most cost-effective and compliant?
Select an answer first
7foundation · easy
What is the purpose of archival and retention requirements in asset management?
Select an answer first
8application · medium
A company has implemented a new asset management system. The security team must ensure that all hardware and software assets are tracked and that licenses are compliant. Which action is most important for maintaining an accurate inventory?
Select an answer first
9application · medium
A company is replacing its legacy file server with a new cloud-based storage solution. The legacy server contains sensitive customer data that must be preserved for regulatory compliance. The server is at end of life and must be decommissioned. Which sequence of actions is most appropriate?
Select an answer first
10foundation · easy
Why is maintaining an accurate inventory of hardware, software, and data assets important for an organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.