CAS-003 · Question #379
A security architect has assigned an engineer to implement a system to maintain visibility, corporate IT devices as they transfer from department to department. The engineer must ensure all…
The correct answer is B. Blockchain-based asset management. Blockchain-based asset management meets both stated requirements uniquely well: (1) maintaining a tamper-evident chain of custody as devices transfer between departments, and (2) providing a transparent, verifiable record that all employees can view. A blockchain ledger is…
Question
A security architect has assigned an engineer to implement a system to maintain visibility, corporate IT devices as they transfer from department to department. The engineer must ensure all employees can view a secure record of who is responsible for each device. Which of the following would be the BEST mechanism to implement the stated requirements?
Options
- AElectronically signed equipment receipts
- BBlockchain-based asset management
- CWAYF-based technologies.
- DContext-aware authentication mechanisms
How the community answered
(21 responses)- A5% (1)
- B81% (17)
- C10% (2)
- D5% (1)
Explanation
Blockchain-based asset management meets both stated requirements uniquely well: (1) maintaining a tamper-evident chain of custody as devices transfer between departments, and (2) providing a transparent, verifiable record that all employees can view. A blockchain ledger is immutable - once a transfer of responsibility is recorded, it cannot be altered without detection, satisfying the 'secure record' requirement. Its distributed and transparent nature means any authorized employee can query the full device history. Option A (electronically signed equipment receipts) provides point-in-time signatures but lacks the continuous, queryable chain-of-custody visibility across all historical transfers. Option C (WAYF - Where Are You From) is a federated identity/authentication technology used in academic SSO contexts and is completely unrelated to asset tracking. Option D (context-aware authentication) manages access decisions based on contextual factors and has no relevance to device custody tracking.
Topics
Community Discussion
No community discussion yet for this question.