CCSP · Question #348
It's important to maintain a current asset inventory list, including surveying your environment on a regular basis, in order to ____________. Response:
The correct answer is A. Prevent unknown, unpatched assets from being used as back doors to the environment. Maintaining a current asset inventory is crucial for identifying and mitigating security risks posed by unknown or unpatched devices that could serve as unauthorized entry points into the network.
Question
It's important to maintain a current asset inventory list, including surveying your environment on a regular basis, in order to ____________. Response:
Options
- APrevent unknown, unpatched assets from being used as back doors to the environment
- BEnsure that any lost devices are automatically entered into the acquisition system for
- CMaintain user morale by having their devices properly catalogued and annotated
- DEnsure that billing for all devices is handled by the appropriate departments
How the community answered
(18 responses)- A94% (17)
- D6% (1)
Why each option
Maintaining a current asset inventory is crucial for identifying and mitigating security risks posed by unknown or unpatched devices that could serve as unauthorized entry points into the network.
A comprehensive and up-to-date asset inventory allows organizations to track all devices and software within their environment. This visibility is critical for identifying 'shadow IT' or rogue devices, ensuring all assets are properly patched, configured, and monitored, thereby preventing unmanaged systems from becoming vulnerable access points or 'back doors' for attackers.
An asset inventory helps track existing assets, but it does not automatically enter lost devices into an acquisition system; that's a separate procurement and asset management process.
While accurate inventory can contribute to organized operations, its primary purpose is not to maintain user morale.
While asset inventory data can feed into billing systems, its fundamental security purpose is not to ensure billing is handled by appropriate departments.
Concept tested: Importance of asset inventory for security
Source: https://csrc.nist.gov/projects/risk-management/sp-800-53-controls/release-5-and-the-privacy-framework/cm/control/cm-8
Topics
Community Discussion
No community discussion yet for this question.