SK0-004 · Question #66
A company is being audited by its operating system vendor. The company needs to report the number of operating systems in use, the versions of the operating systems, and the product keys. Which of…
The correct answer is A. Asset management documentation. Asset management documentation tracks software inventory details such as OS versions, quantities, and license keys, which are exactly the data points required during a software license audit.
Question
A company is being audited by its operating system vendor. The company needs to report the number of operating systems in use, the versions of the operating systems, and the product keys. Which of the following will be MOST helpful in passing the audit?
Options
- AAsset management documentation
- BChange management logs
- CService manuals
- DServer baselines
How the community answered
(44 responses)- A89% (39)
- B2% (1)
- C7% (3)
- D2% (1)
Why each option
Asset management documentation tracks software inventory details such as OS versions, quantities, and license keys, which are exactly the data points required during a software license audit.
Asset management documentation maintains a comprehensive inventory of all hardware and software assets, including operating system names, versions, edition counts, and product/license keys. This makes it the primary resource for demonstrating license compliance to a vendor auditor. Without this documentation, an organization cannot quickly or accurately report on its software estate.
Change management logs track modifications made to systems over time, not the current software inventory or license keys.
Service manuals contain hardware maintenance and repair procedures, not software license or version data.
Server baselines document a system's standard configuration for security or performance purposes, not license key inventories.
Concept tested: Software asset management for license compliance audits
Source: https://www.nist.gov/system/files/documents/cyberframework/cybersecurity-framework-021214.pdf
Topics
Community Discussion
No community discussion yet for this question.