Back to Security Policies and Procedures

Asset Management

5 minutes 5 Questions

Asset management involves identifying, classifying, and maintaining an inventory of an organization's physical and digital assets, including hardware, software, and data. A thorough understanding of these assets is essential for developing appropriate security policies and procedures. Asset managem…

Test mode:
Start practice test
CompTIA Security+ - Asset Management Example Questions

Test your knowledge of Asset Management

Question 1

A company policy states that all employees need to authorize any connections to the network. A user brings in a personal laptop and connects it to the network. What approach should an IT administrator take?

Correct Answer: Disconnect the laptop and educate the user on proper network device authorization policies.

The correct action for the IT administrator to take would be 'Disconnect the laptop and educate the user on proper network device authorization policies.' This scenario violates the company's policy about connecting unauthorized devices to the network. Therefore, the IT administrator should first of all disconnect the violator's laptop and then educate the user about properly following the company's policy. The other options are incorrect due to the following reasons: 'Ignore the laptop as the user is aware of company policies.' This is incorrect because, even if the user is aware of the policy, they are still violating it and it is the IT administrator's responsibility to enforce policy. 'Grant the laptop permanent access to the network.' This is against company policy, which requires all connections to the network to be authorized. 'Reformat the laptop and move it to another department.' This is unnecessary and extreme because the primary issue is not with the laptop itself, but rather with the authorization process not being followed.

Question 2

A new employee is replacing a computer in the IT department of an organization. They unintentionally mark the new computer as offline in the asset management system. Which measure should the organization implement to avoid such discrepancies in the future?

Correct Answer: Require approval for asset modifications

Requiring approval for asset modifications reduces the risk of inaccurate records due to user error. Other options may contribute to better overall management but don't address this specific problem.

Question 3

A network operations center was recently breached due to an unauthorized device being connected to the network. Which solution best prevents this scenario from occurring again?

Correct Answer: Implement Network Access Control (NAC) to restrict unauthorized devices.

The best solution to prevent unauthorized devices from breaching the network operations center is to 'Implement Network Access Control (NAC)'. This is because Network Access Control provides the ability to set policies for network access at the device level and can restrict unauthorized devices automatically. Delegating asset management to individual users wouldn't necessarily prevent unauthorized devices from being connected. An annual audit is a good practice, but it's more reactive and not efficient if trying to prevent a breach because it's only done yearly. While firewall technology can help detect threats, it's not specifically designed to control unauthorized devices from connecting to the network.

More Asset Management questions
12 questions (total)
Start 12 question test