CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following controls BEST allows an organization to ensure a complete and accurate IT asset inventory?

A Requesting an asset list from business owners
B Prohibiting the use of personal devices for business
C Performing network scanning for unknown devices
D Documenting asset configuration baselines

Explanation

Network scanning discovers devices present on the organization’s network, including unregistered or otherwise unknown devices. This enables the asset inventory to be reconciled against the actual environment for completeness and accuracy.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1305

Community Discussion