nerdexam
(ISC)2

CISSP · Question #1196

An organization is looking to include mobile devices in its asset management system for better tracking. In which system tier of the reference architecture would mobile devices be tracked?

The correct answer is C. 2. Mobile devices are classified as Tier 2 assets in the Purdue/reference architecture model, which encompasses enterprise IT systems including workstations, mobile devices, and general-purpose computing equipment.

Submitted by krish.m· Mar 5, 2026Asset Security

Question

An organization is looking to include mobile devices in its asset management system for better tracking. In which system tier of the reference architecture would mobile devices be tracked?

Options

  • A0
  • B1
  • C2
  • D3

How the community answered

(29 responses)
  • A
    3% (1)
  • C
    93% (27)
  • D
    3% (1)

Why each option

Mobile devices are classified as Tier 2 assets in the Purdue/reference architecture model, which encompasses enterprise IT systems including workstations, mobile devices, and general-purpose computing equipment.

A0

Tier 0 represents the most critical layer, typically encompassing physical process-level devices such as sensors and actuators in industrial control system architectures, not mobile devices.

B1

Tier 1 covers basic control systems and controllers (such as PLCs and RTUs) that directly manage physical processes, which is not where mobile devices are categorized.

C2Correct

Tier 2 in the reference architecture represents the enterprise zone where standard IT assets reside, including workstations, laptops, mobile devices, and other end-user computing equipment. Mobile devices fall into this tier because they operate at the enterprise network level, connecting to corporate resources for business productivity rather than directly interfacing with control systems or critical infrastructure. Asset management systems track mobile devices at this tier alongside other general-purpose computing endpoints.

D3

Tier 3 (or higher) typically represents the demilitarized zone (DMZ) or external-facing network segments used for internet connectivity and external services, not the tier where mobile endpoints are tracked.

Concept tested: Asset classification tiers in reference architecture models

Source: https://learn.microsoft.com/en-us/security/privileged-access-workstations/privileged-access-access-model

Topics

#asset management#mobile devices#asset classification#system tiering

Community Discussion

No community discussion yet for this question.

Full CISSP Practice