Which activity is a primary focus of the planning and initiation phase of asset management?

Installing and configuring the asset

Sanitizing storage media before disposal

Defining requirements and conducting a risk assessment

A government contractor must retain project emails for seven years per federal regulations. The email system is being migrated to a new platform, and the contractor wants to ensure the archived emails remain accessible and unaltered for the full retention period. Which action best meets the retention requirement?

Export all emails to a searchable PDF archive and store them on a network share.

Use an email archiving solution that provides write-once-read-many (WORM) storage and legal hold capabilities.

Store the emails on a tape backup and keep the tapes in a secure offsite facility.

Keep the old email system running solely for archival access.

A development team is using an open-source library in a commercial product. The team wants to ensure they are compliant with the library's license. Which action is most appropriate?

Ignore the license and use the library as needed.

Assume the library is free to use without any restrictions.

Replace the library with a proprietary one to avoid license issues.

Review the open-source license to understand its obligations, such as attribution or copyleft requirements.

A company is decommissioning a server that contains archived financial records. The records must be retained for seven years per regulatory requirements. The server is at end of life and must be removed from service. Which action is most appropriate?

Securely wipe the server's drives immediately to prevent data leakage.

Migrate the archived records to a secure archival storage solution, verify accessibility, then securely wipe the server's drives.

Keep the server running solely to retain the archived records.

Delete the archived records and decommission the server.

What is the primary goal of the implementation and assessment phase of asset management?

To monitor the asset for vulnerabilities and apply patches

To define the asset's requirements and budget

To deploy assets securely and verify they meet performance and security requirements

To determine the asset's end-of-life date

Systems Security Certified Practitioner

Domain 1Objective 5

1.5 - Support and Implement Asset Management Lifecycle (i.e., Hardware, Software, and Data) SSCP Practice Questions (Page 4)

Part of the Security Concepts and Practices domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

16%of the exam

Questions 16–20

16foundation · easy
Which activity is a primary focus of the planning and initiation phase of asset management?
Select an answer first
17application · medium
A government contractor must retain project emails for seven years per federal regulations. The email system is being migrated to a new platform, and the contractor wants to ensure the archived emails remain accessible and unaltered for the full retention period. Which action best meets the retention requirement?
Select an answer first
18application · medium
A development team is using an open-source library in a commercial product. The team wants to ensure they are compliant with the library's license. Which action is most appropriate?
Select an answer first
19expert · hard
A company is decommissioning a server that contains archived financial records. The records must be retained for seven years per regulatory requirements. The server is at end of life and must be removed from service. Which action is most appropriate?
Select an answer first
20foundation · easy
What is the primary goal of the implementation and assessment phase of asset management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.