nerdexam
Isaca

CISA · Question #332

Which of the following is the BEST way to detect unauthorized copies of licensed software on systems?

The correct answer is B. Conduct periodic software scanning. Periodic software scanning (using software asset management or discovery tools) actively interrogates each system to inventory all installed software and compare it against the authorized license register. This is a direct detective control that reveals what is actually running…

Submitted by kavita_s· Apr 18, 2026Governance and Management of IT

Question

Which of the following is the BEST way to detect unauthorized copies of licensed software on systems?

Options

  • ARequire senior management approval when installing licenses
  • BConduct periodic software scanning
  • CPerform periodic counting of licenses
  • DImplement controls to prohibit downloads of unauthorized software

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    90% (46)
  • C
    6% (3)
  • D
    2% (1)

Explanation

Periodic software scanning (using software asset management or discovery tools) actively interrogates each system to inventory all installed software and compare it against the authorized license register. This is a direct detective control that reveals what is actually running on systems. Option A (senior management approval for installs) is a preventive control but does not detect software already installed without approval. Option C (counting licenses) tells you how many licenses you own but not whether unauthorized software is installed. Option D (prohibiting downloads) is also preventive and can be circumvented (e.g., via USB or network shares), so it does not detect violations that have already occurred.

Topics

#Software licensing#Unauthorized software detection#IT auditing#Software asset management

Community Discussion

No community discussion yet for this question.

Full CISA Practice