CISA · Question #332
Which of the following is the BEST way to detect unauthorized copies of licensed software on systems?
The correct answer is B. Conduct periodic software scanning. Periodic software scanning (using software asset management or discovery tools) actively interrogates each system to inventory all installed software and compare it against the authorized license register. This is a direct detective control that reveals what is actually running…
Question
Which of the following is the BEST way to detect unauthorized copies of licensed software on systems?
Options
- ARequire senior management approval when installing licenses
- BConduct periodic software scanning
- CPerform periodic counting of licenses
- DImplement controls to prohibit downloads of unauthorized software
How the community answered
(51 responses)- A2% (1)
- B90% (46)
- C6% (3)
- D2% (1)
Explanation
Periodic software scanning (using software asset management or discovery tools) actively interrogates each system to inventory all installed software and compare it against the authorized license register. This is a direct detective control that reveals what is actually running on systems. Option A (senior management approval for installs) is a preventive control but does not detect software already installed without approval. Option C (counting licenses) tells you how many licenses you own but not whether unauthorized software is installed. Option D (prohibiting downloads) is also preventive and can be circumvented (e.g., via USB or network shares), so it does not detect violations that have already occurred.
Topics
Community Discussion
No community discussion yet for this question.