I85PREP
⌘ K
GAA study materials
GAA study resources

GAA practice questions

One question at a time. Build your GAA understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1IT Asset Management Fundamentals and Governance

Which statement best describes the purpose of an IT asset register within an asset management practice?

  1. It records the controlled inventory of IT assets and their key attributes so they can be tracked across their lifecycle. Correct answer.
  2. It lists the marketing campaigns that each business unit plans to run during the year.
  3. It stores the source code repositories used to build internally developed applications.
  4. It documents the disciplinary process applied when staff breach acceptable use policy.

Explanation

The asset register is the authoritative record of IT assets and their attributes, supporting lifecycle tracking, cost control, and risk decisions. It is not a code repository, a disciplinary document, or a business planning tool, so those options confuse unrelated records with the asset inventory.

Question 2IT Asset Management Fundamentals and Governance

An organization wants to reduce the risk of unlicensed software being installed on corporate laptops. Which IT asset management practice most directly addresses this?

  1. Reviewing the marketing budget allocated to each department
  2. Publishing a list of approved office furniture suppliers
  3. Recording the physical location of each laptop in the building floor plan
  4. Tracking installed software against entitlements through software asset management controls Correct answer.

Explanation

Software asset management reconciles what is installed with what is licensed, which is the mechanism that detects and prevents unlicensed installations. Floor plans, budgets, and furniture suppliers do not link software installations to entitlements.

Question 3IT Asset Management Fundamentals and Governance

What is the primary distinction between an IT asset and a configuration item (CI) in a service management context?

  1. An asset exists only in the cloud, whereas a CI exists only on-premises.
  2. A configuration item is any item that appears on a balance sheet.
  3. An asset is a financially valued item, while a CI is any component that must be managed to deliver a service. Correct answer.
  4. An asset is always more expensive than a configuration item.

Explanation

Asset management focuses on financial value and ownership, while configuration management tracks any component that affects service delivery, whether or not it carries financial value. The two views overlap but serve different purposes, so cost and hosting location are not the defining criteria.

Question 4IT Asset Management Fundamentals and Governance

A CIO asks for a single view showing which business services depend on a soon-to-be-retired server. Which capability provides this?

  1. The accounts payable ledger
  2. The software license reconciliation report
  3. The configuration management system's relationship mapping Correct answer.
  4. The employee onboarding checklist

Explanation

Dependency and relationship mapping in the configuration management system shows which services rely on a given component, enabling impact analysis before retirement. License reconciliation, payables, and onboarding records do not model service dependencies.

Question 5IT Asset Management Fundamentals and Governance

Which practice best supports data quality in an IT asset register over time?

  1. Collecting asset attributes only once at procurement and never updating them
  2. Freezing the register after initial population to prevent changes
  3. Assigning clear ownership and scheduling periodic reconciliation against discovery data Correct answer.
  4. Allowing each team to maintain its own private spreadsheet copy of asset data

Explanation

Sustained data quality depends on accountable owners plus recurring reconciliation against automated discovery so drift is detected and corrected. Private copies, frozen records, and one-time capture all allow the register to diverge from reality.

Question 6IT Asset Management Fundamentals and Governance

In IT asset management, what does the term 'cradle-to-grave' management refer to?

  1. Managing only the physical security of data centers
  2. Managing assets only during the warranty period
  3. Managing the careers of IT support staff
  4. Managing an asset through planning, procurement, deployment, operation, and disposal Correct answer.

Explanation

Cradle-to-grave management covers the full lifecycle of an asset from initial planning and acquisition through operation to retirement and disposal. Limiting scope to warranty, facilities security, or staffing misses the lifecycle concept entirely.

Question 7IT Asset Management Fundamentals and Governance

Which governance body is typically accountable for approving IT asset management policy and setting risk appetite?

  1. The IT asset management steering committee Correct answer.
  2. The service desk shift team
  3. The facilities cleaning contractor
  4. The external software publisher

Explanation

A steering or governance committee with cross-functional authority approves policy, sets risk appetite, and oversees performance. Operational teams, vendors, and contractors execute or supply but do not own enterprise policy decisions.

Question 8IT Asset Management Fundamentals and Governance

An auditor finds that 200 servers were decommissioned but remain listed as active in the asset register. Which control failure does this most directly indicate?

  1. Insufficient user training on password complexity
  2. Excessive software licensing
  3. Inadequate disposal and retirement reconciliation Correct answer.
  4. Poor network bandwidth planning

Explanation

Assets removed from service should be retired in the register as part of disposal and reconciliation controls; leaving them active signals that this control is not operating. Licensing, bandwidth, and password training are unrelated to retirement record accuracy.

Question 9IT Asset Management Fundamentals and Governance

Which metric best indicates whether an organization is over-licensed for a major software product?

  1. The average age of the server fleet
  2. The number of help desk tickets raised per month
  3. The gap between entitlements owned and licenses actually consumed Correct answer.
  4. The count of active network switches

Explanation

Comparing entitlements owned with actual consumption reveals surplus licenses that represent avoidable cost. Ticket volume, fleet age, and switch counts describe operations and infrastructure, not licensing efficiency.

Question 10IT Asset Management Fundamentals and Governance

What is the main purpose of tagging or labeling physical IT assets?

  1. To encrypt data stored on the device
  2. To satisfy building fire safety regulations
  3. To increase the resale value of the equipment
  4. To enable reliable identification and association of the physical item with its asset record Correct answer.

Explanation

Tags provide a durable identifier that links the physical item to its record, supporting audits, tracking, and reconciliation. Labels do not add resale value, address fire codes, or perform encryption.

Question 11IT Asset Management Fundamentals and Governance

Which approach best balances the cost of hardware refresh against business risk?

  1. Using risk-based refresh criteria that consider age, failure rate, support status, and business criticality Correct answer.
  2. Refreshing only the devices used by senior executives
  3. Replacing all equipment at a fixed calendar interval regardless of condition
  4. Keeping equipment until it fails without any monitoring

Explanation

Risk-based refresh weighs supportability, failure trends, and criticality so investment targets the assets that pose the greatest risk. Fixed intervals ignore condition, run-to-failure raises outage risk, and executive-only refresh is inequitable and unsound.

Question 12IT Asset Management Fundamentals and Governance

A company must demonstrate to a regulator that end-of-life storage media were securely sanitized before disposal. Which record is most relevant?

  1. The network topology diagram
  2. The annual marketing plan
  3. The purchase order for the original hardware
  4. The certificate of destruction or sanitization log linked to each asset Correct answer.

Explanation

Evidence of sanitization or destruction, tied to specific asset identifiers, is what demonstrates secure disposal to a regulator. Purchase orders, topology diagrams, and marketing plans do not attest to data removal.

Question 13IT Asset Management Fundamentals and Governance

Which factor most commonly causes an IT asset register to diverge from the actual estate?

  1. Unmanaged changes such as shadow IT and missed update procedures Correct answer.
  2. Assigning a unique identifier to each asset
  3. Using a relational database for the register
  4. Reviewing the register quarterly

Explanation

Divergence typically arises when changes occur outside controlled processes, such as shadow IT or skipped updates, so the register no longer reflects reality. Database choice, unique identifiers, and periodic review all support accuracy rather than undermine it.

Question 14IT Asset Management Fundamentals and Governance

Which of the following best describes the concept of a definitive media library in asset and configuration management?

  1. A backup tape rotation schedule
  2. A secure store of authorized master copies of software and media Correct answer.
  3. A list of approved hardware vendors
  4. A public website for downloading open-source tools

Explanation

A definitive media library holds authorized master copies of software and related media under version and access control. It is not a public download site, a backup schedule, or a vendor list.

Question 15IT Asset Management Fundamentals and Governance

An organization discovers it is running more database licenses than it owns. What is the most appropriate immediate governance response?

  1. Quantify the shortfall, remediate with purchases or deinstallation, and record the decision Correct answer.
  2. Disable the discovery tool that produced the finding
  3. Ignore the gap until the next annual audit
  4. Delete the asset register entries for the affected servers

Explanation

A compliance gap requires quantification, a remediation plan such as true-up purchase or removal, and documented decisions for auditability. Ignoring it, deleting records, or disabling discovery conceals the issue and increases legal and financial exposure.

Question 16IT Asset Management Fundamentals and Governance

Why should financial depreciation data and technical lifecycle data be linked in IT asset management?

  1. To allow tax authorities to configure the servers
  2. To replace the need for configuration management
  3. To ensure the asset is retired from service at the same time its book value reaches zero Correct answer.
  4. To prevent users from installing approved software

Explanation

Linking depreciation with lifecycle status helps align financial write-off with actual retirement, avoiding assets carried on the books after disposal or retired early with residual value. Tax authorities, software installation, and configuration management are not the purpose.

Question 17IT Asset Management Fundamentals and Governance

Which role is typically responsible for defining the asset taxonomy and mandatory attributes used across the organization?

  1. The external cloud provider's billing team
  2. The individual end user of each laptop
  3. The help desk analyst on night shift
  4. The asset management process owner with governance approval Correct answer.

Explanation

The process owner, supported by governance approval, defines taxonomy and mandatory attributes so data is consistent enterprise-wide. End users, external billing teams, and individual analysts do not set enterprise data standards.

Question 18IT Asset Management Fundamentals and Governance

Which statement correctly describes the relationship between IT asset management and IT service management?

  1. Asset management replaces service management entirely.
  2. The two disciplines must never share data.
  3. Service management is only concerned with marketing services.
  4. Asset management supplies accurate asset and financial data that service management uses for planning and support. Correct answer.

Explanation

Asset management provides reliable inventory and financial information that service management draws on for capacity, support, and lifecycle decisions. The disciplines are complementary, so replacement, marketing-only scope, and data isolation are incorrect.

Question 19IT Asset Management Fundamentals and Governance

A discovery tool reports 500 workstations but the asset register lists 460. Which action best reflects sound asset management practice?

  1. Adjust the discovery tool until it reports 460
  2. Delete the discovery data and rely on the register alone
  3. Purchase 40 additional workstations immediately
  4. Investigate the 40-record discrepancy, reconcile the register, and correct the root cause Correct answer.

Explanation

Discrepancies between discovery and the register should be investigated, reconciled, and traced to a root cause so the record becomes accurate and stays accurate. Manipulating tools, discarding evidence, or buying hardware does not resolve the data gap.

Question 20IT Asset Management Fundamentals and Governance

Which of the following is the best example of a leading indicator for an IT asset management program?

  1. Total cost of unused licenses in the prior period
  2. Count of incidents caused by unsupported hardware last quarter
  3. Percentage of new assets recorded within the mandated timeframe Correct answer.
  4. Number of audit findings raised last year

Explanation

A leading indicator measures whether controls are operating now and predicts future outcomes, such as timely recording of new assets. Audit findings, past unused-license cost, and prior incidents are lagging indicators of results already realized.

Question 21IT Asset Management Fundamentals and Governance

What is the primary benefit of maintaining a hardware asset's full chain of custody from receipt to disposal?

  1. It guarantees the device will never fail.
  2. It provides traceability for accountability, loss prevention, and audit evidence. Correct answer.
  3. It removes the requirement for configuration records.
  4. It eliminates the need for software licensing.

Explanation

Chain of custody creates traceability that supports accountability, deters loss, and supplies audit evidence about who held an asset and when. It cannot prevent hardware failure, replace licensing, or substitute for configuration records.

Question 22IT Asset Management Fundamentals and Governance

An organization plans to move workloads to cloud infrastructure. Which asset management change is most important to make first?

  1. Stop tracking all on-premises hardware immediately
  2. Extend the asset model to capture cloud resources and their ownership and cost attributes Correct answer.
  3. Remove financial data from the asset register
  4. Cancel all software licenses on day one

Explanation

Cloud resources must be represented in the asset model with ownership and cost attributes so they are governed like other assets. Abandoning on-premises tracking, cancelling licenses prematurely, or stripping financial data creates control gaps.

Question 23IT Asset Management Fundamentals and Governance

Which control most directly reduces the risk of software being installed without approval?

  1. Restricting installation rights and maintaining an approved software catalog Correct answer.
  2. Increasing the number of printers available to staff
  3. Rotating the badge access codes for the server room
  4. Scheduling monthly team-building events

Explanation

Limiting who can install software and publishing an approved catalog prevents unauthorized installations at the source. Printers, badge codes, and team events have no effect on software installation control.

Question 24IT Asset Management Fundamentals and Governance

Which statement best explains why asset criticality ratings are assigned in an IT asset register?

  1. To determine the resale price of each device
  2. To set the interest rate on corporate loans
  3. To prioritize protection, support, and recovery effort according to business impact Correct answer.
  4. To decide which employees receive promotions

Explanation

Criticality ratings translate business impact into priorities for security controls, support response, and recovery planning. Resale value, HR decisions, and financing terms are unrelated to asset criticality classification.

Question 25Asset Discovery, Inventory, and Configuration Management

Which asset attribute most directly determines whether a discovered host should be classified as a server rather than a workstation in an asset inventory?

  1. The MAC address vendor prefix of the host
  2. The physical location recorded for the host
  3. The operating system edition installed on the host
  4. The role-based service fingerprint observed on the host Correct answer.

Explanation

Classification by role relies on the services a host exposes, such as directory, database, or web roles, because those services define what the asset does rather than merely what it runs. OS edition, location, and hardware vendor are supporting attributes but do not by themselves establish server versus workstation role.

Question 26Asset Discovery, Inventory, and Configuration Management

An asset inventory records a device serial number, hostname, IP address, and owning department. Which of these is the most stable identifier for tracking the same physical asset across years of change?

  1. The serial number Correct answer.
  2. The IP address
  3. The hostname
  4. The owning department

Explanation

A manufacturer serial number is tied to the physical unit and persists through renames, re-addressing, and organizational moves, making it the strongest durable key. IP addresses are reassigned, hostnames change with naming conventions, and departments reorganize, so all three are volatile.

Question 27Asset Discovery, Inventory, and Configuration Management

A configuration management baseline defines required settings for a server build. What is the primary purpose of comparing discovered configuration against that baseline?

  1. To measure network throughput between data centers
  2. To detect drift from the approved secure configuration Correct answer.
  3. To calculate software licensing costs per user
  4. To schedule operating system patch windows

Explanation

A baseline captures the approved state, and comparison against discovered settings reveals configuration drift that may reintroduce risk. The comparison is a control-verification activity, not a performance, licensing, or scheduling function.

Question 28Asset Discovery, Inventory, and Configuration Management

Which discovery method is best suited to identifying unmanaged devices that have no installed agent and appear only intermittently on the network?

  1. Reviewing procurement purchase orders
  2. Agent-based inventory polling
  3. Manual spreadsheet entry by asset owners
  4. Unauthenticated network scanning of address ranges Correct answer.

Explanation

Unauthenticated scanning sweeps address space and can observe hosts that lack agents and connect sporadically, which agent polling and manual records will miss. Procurement records only reflect purchased equipment and manual entry depends on owner diligence.

Question 29Asset Discovery, Inventory, and Configuration Management

In an asset inventory, what distinguishes a configuration item from a general asset record?

  1. A configuration item is a device excluded from change management
  2. A configuration item is an asset under configuration control with tracked attributes and relationships Correct answer.
  3. A configuration item is only software installed on a server
  4. A configuration item is any device with an IP address

Explanation

A configuration item is an element placed under configuration control whose attributes, versions, and relationships are recorded and managed. Not every addressable device qualifies, and configuration items include hardware, software, and services rather than only installed applications.

Question 30Asset Discovery, Inventory, and Configuration Management

A vulnerability scanner reports a missing security update on a host, but the asset inventory shows the host was decommissioned two weeks earlier. What is the most likely explanation for the discrepancy?

  1. The scanner produced a false negative
  2. The vulnerability database was updated
  3. The host firmware was upgraded
  4. The inventory decommission record is stale and the host is still active Correct answer.

Explanation

A live scan result contradicts the inventory record, which usually means the decommission status was not propagated to the discovery and scanning tooling. Reconciling the inventory against observed state resolves which record is authoritative before remediation effort is spent.

Question 31Asset Discovery, Inventory, and Configuration Management

Which practice best reduces duplicate asset records when multiple discovery sources report the same host under different names?

  1. Relying on users to report duplicate entries
  2. Storing each source in a separate inventory database
  3. Accepting the most recent record and deleting all others
  4. Normalizing and correlating records against a primary key such as serial number or asset tag Correct answer.

Explanation

De-duplication requires a normalization and correlation step that maps multiple observations to one authoritative identifier. Deleting by recency loses history, siloed databases prevent correlation, and user reporting does not scale to automated discovery volume.

Question 32Asset Discovery, Inventory, and Configuration Management

An organization wants to detect unauthorized changes to a web server's configuration files between scheduled scans. Which capability is most appropriate?

  1. Continuous file integrity monitoring with baseline comparison Correct answer.
  2. Quarterly asset inventory certification
  3. Weekly authenticated vulnerability scanning
  4. Annual penetration testing

Explanation

File integrity monitoring continuously compares file state to a known baseline and alerts on change, which detects unauthorized modification between periodic activities. Weekly scans, annual testing, and quarterly certification are too infrequent to catch changes promptly.

Question 33Asset Discovery, Inventory, and Configuration Management

A discovery scan is configured with credentials for Windows hosts. What is the primary advantage of authenticated over unauthenticated scanning for those hosts?

  1. It avoids generating any network traffic
  2. It retrieves detailed installed software and configuration data Correct answer.
  3. It eliminates the need for an asset inventory
  4. It guarantees the host has no vulnerabilities

Explanation

Authenticated scanning uses local access to read registry, package, and configuration details that unauthenticated probing cannot reliably obtain. It still generates traffic, does not replace inventory, and provides no guarantee about vulnerability status.

Question 34Asset Discovery, Inventory, and Configuration Management

Which inventory data element is most important for determining whether an end-of-support operating system still poses exposure?

  1. The asset's purchase price
  2. The asset's physical rack position
  3. The operating system version and its vendor support status Correct answer.
  4. The asset's network switch port

Explanation

Exposure from unsupported software depends on the exact version and whether the vendor still issues security fixes for it. Rack position, price, and switch port are useful for other purposes but do not indicate support lifecycle status.

Question 35Asset Discovery, Inventory, and Configuration Management

An organization maintains a CMDB that links each application to the servers it runs on. Which benefit does this relationship data primarily provide during incident response?

  1. Elimination of the need for change records
  2. Automatic patching of all related servers
  3. Faster identification of affected systems and dependencies Correct answer.
  4. Reduction of the total number of assets

Explanation

Relationship data lets responders trace an application to its hosting infrastructure and dependent services, narrowing impact assessment quickly. It does not patch systems, reduce asset counts, or replace change management records.

Question 36Asset Discovery, Inventory, and Configuration Management

A security team needs to know which hosts are missing a specific configuration setting across a large fleet. Which combination of capabilities is required?

  1. Asset discovery alone
  2. Vulnerability scanning alone
  3. Network flow analysis alone
  4. Configuration collection plus comparison to a defined desired state Correct answer.

Explanation

Answering the question requires both collecting the current setting from each host and a defined desired state to compare against. Discovery alone finds hosts, vulnerability scanning finds known flaws, and flow analysis observes traffic, none of which evaluates a specific setting.

Question 37Asset Discovery, Inventory, and Configuration Management

Which factor most affects how frequently a network discovery scan should run in a dynamic environment with frequent guest devices?

  1. The rate at which the address space changes and devices join or leave Correct answer.
  2. The number of administrators employed
  3. The brand of network switches deployed
  4. The color scheme of the inventory dashboard

Explanation

Scan cadence should match the churn rate of the environment so the inventory stays current without excessive scan load. Dashboard styling, staffing counts, and switch vendor do not determine how quickly asset state becomes stale.

Question 38Asset Discovery, Inventory, and Configuration Management

A discovered host responds to ping but returns no open ports during a scan. What is the most reasonable next step before recording it as an unmanaged asset?

  1. Investigate whether host-based firewalls or filtering blocked the scan Correct answer.
  2. Mark the host as decommissioned
  3. Delete the record because no services were found
  4. Assume the host is a printer

Explanation

A responsive host with no visible ports often indicates filtering or a host firewall rather than an unused device, so the scan conditions should be validated before classification. Deleting, guessing the device type, or decommissioning based on incomplete data would corrupt the inventory.

Question 39Asset Discovery, Inventory, and Configuration Management

Which control ensures that only approved hardware models are connected to the corporate network?

  1. Configuration baseline enforcement
  2. Vulnerability severity scoring
  3. Log retention policy
  4. Hardware inventory reconciliation against an approved model list Correct answer.

Explanation

Comparing discovered hardware models to an approved list identifies unapproved equipment on the network. Baseline enforcement governs settings, severity scoring prioritizes vulnerabilities, and log retention governs evidence storage.

Question 40Asset Discovery, Inventory, and Configuration Management

An asset owner reports a laptop as lost, but discovery later observes the same device connecting to the corporate VPN. What should the inventory and security workflow do first?

  1. Close the lost-device ticket as resolved
  2. Remove the device from the inventory permanently
  3. Reconcile the discovery observation with the lost-device record and escalate for investigation Correct answer.
  4. Reimage the device remotely without confirmation

Explanation

The conflicting records indicate either a recovered device or misuse, so reconciliation and investigation must precede any resolution. Closing the ticket, remote reimaging, or deleting the record could destroy evidence or disrupt legitimate recovery.

Question 41Asset Discovery, Inventory, and Configuration Management

Which statement best describes the relationship between an asset inventory and a configuration management database?

  1. They are identical and always interchangeable
  2. The CMDB replaces the need to discover assets
  3. The inventory stores only software license keys
  4. The inventory tracks what exists, while the CMDB adds configuration items and their relationships Correct answer.

Explanation

An asset inventory focuses on existence and attributes of assets, while a CMDB extends this with configuration items, their attributes, and dependency relationships. They overlap but are not interchangeable, and the CMDB does not remove the need for discovery.

Question 42Asset Discovery, Inventory, and Configuration Management

A cloud environment uses auto-scaling, so instances are created and destroyed continuously. Which inventory approach best maintains accurate records?

  1. Scanning only the static on-premises range
  2. Automated ingestion of cloud provider inventory APIs with lifecycle state tracking Correct answer.
  3. Annual manual reconciliation of cloud resources
  4. Relying on users to register each new instance

Explanation

Cloud APIs expose instance lifecycle events and metadata continuously, so automated ingestion keeps pace with ephemeral resources. Manual annual reconciliation, user registration, and on-premises-only scanning cannot track rapid autoscaling.

Question 43Asset Discovery, Inventory, and Configuration Management

Which data quality attribute is violated when an inventory lists the same server under two different asset tags assigned by two discovery tools?

  1. Timeliness
  2. Confidentiality
  3. Uniqueness Correct answer.
  4. Completeness

Explanation

Uniqueness requires that each real asset appear exactly once, so duplicate tags for one server break that attribute. Timeliness concerns currency, completeness concerns missing records, and confidentiality concerns access control.

Question 44Asset Discovery, Inventory, and Configuration Management

A server is found running an unauthorized service on a nonstandard port. Which inventory and configuration practice would most likely have detected this earlier?

  1. Continuous service fingerprinting compared with the approved service baseline Correct answer.
  2. Annual firewall rule review only
  3. Reviewing procurement invoices monthly
  4. Tracking user password change intervals

Explanation

Continuous service fingerprinting identifies listening services, and comparison with an approved baseline flags unauthorized additions such as a nonstandard port. Invoices, annual firewall reviews, and password policies do not observe running services on hosts.

Question 45Asset Discovery, Inventory, and Configuration Management

An organization discovers thousands of previously unknown devices after enabling a new subnet scan. Which immediate risk does this most likely indicate?

  1. The network has too few IP addresses allocated
  2. The CMDB has too many relationship records
  3. The scan engine is misconfigured to report false positives
  4. Shadow IT or unmanaged assets exist outside established inventory control Correct answer.

Explanation

A large influx of previously unseen devices on a scanned range typically reveals unmanaged or shadow assets that were never registered. It is not evidence of false positives, address exhaustion, or relationship overload, though records should still be validated.

Question 46Asset Discovery, Inventory, and Configuration Management

Two discovery sources report different operating system versions for the same host within the same day. Which approach best resolves the conflict in a defensible way?

  1. Always trust the older record
  2. Average the version strings
  3. Apply a defined precedence rule based on source reliability and observation time Correct answer.
  4. Delete both records and rescan manually

Explanation

Conflicting observations should be resolved by an explicit precedence policy that weighs source reliability and recency, producing a repeatable and auditable outcome. Trusting age, averaging versions, or deleting records is arbitrary or destructive.

Question 47Asset Discovery, Inventory, and Configuration Management

An auditor asks for evidence that a hardened build standard was applied to all production servers. Which combination of records best supports this assertion?

  1. Network diagrams and rack elevations
  2. Purchase orders and vendor invoices
  3. User access reviews and training logs
  4. Configuration baseline definition plus per-host compliance results over time Correct answer.

Explanation

The assertion requires both the standard itself and evidence of each host's state against it, which compliance results provide. Financial records, topology diagrams, and access or training logs do not demonstrate applied host configuration.

Question 48Asset Discovery, Inventory, and Configuration Management

A CMDB records that an application depends on a database that was migrated to a new host six months ago. What is the most likely consequence of this stale relationship record?

  1. Reduced storage consumption in the CMDB
  2. Automatic correction by the discovery tool
  3. Improved accuracy of impact analysis
  4. Misleading impact assessment during outages or changes Correct answer.

Explanation

Stale dependency data causes responders and change planners to reason about the wrong infrastructure, producing inaccurate impact assessments. Stale records do not self-correct, improve accuracy, or reduce storage in any meaningful sense.

Question 49Asset Discovery, Inventory, and Configuration Management

Which approach best validates that an asset inventory is complete for a given network segment?

  1. Comparing inventory records against independent discovery results for that segment Correct answer.
  2. Reviewing the inventory schema documentation
  3. Counting the number of records in the inventory
  4. Surveying users about devices they own

Explanation

Completeness is validated by comparing the inventory against an independent observation of the same segment, revealing gaps. Record counts, schema documentation, and user surveys cannot establish whether unrecorded devices exist.

Question 50Asset Discovery, Inventory, and Configuration Management

Which identifier should an asset inventory use as the authoritative, stable key for a physical server so that records from different discovery sources converge on one entry?

  1. The serial number reported by the hardware or hypervisor Correct answer.
  2. The IP address currently leased to the server
  3. The MAC address of the primary network interface
  4. The hostname configured in the operating system

Explanation

A hardware or hypervisor-assigned serial number is tied to the physical or virtual machine and does not change when the host is renamed, re-addressed, or re-cabled. Hostnames, IP addresses, and MAC addresses all change during normal operations, so using them as the primary key produces duplicates and orphaned records.