Font size
Worksheets7.2 Quiz Asset Management Process and Technology Integration
Total questions: 28
Worksheet time: 23mins
Asset Management should require...
(select all that apply)
1. Clearly defined roles and responsibilities
2. Accurate and current inventory for all technology assets that can store and/or process information
3. The inventory includes assets connected to the infrastructure physically, virtually, remotely and in the cloud.
1. Asset inventory includes devices that are not under control of organization but connect to the network infrastructure regularly.
2. Inventory does not need to include data, hardware, and software permitted at teleworking locations.
1. Asset inventory includes devices that are not under control of organization but connect to the network infrastructure regularly.
2. Inventory data, hardware, and software permitted at teleworking locations.
1. Records are kept of all unauthorized asset connections (attempted and successful) to the organization's network.
2. Asset Inventory is reconciled on a bi-annual (or more) frequency.
What is the minimal expectation of reconciling hardware inventory?
Bi-Annual
Annual
Quarterly
Monthly
Technology asset inventories should include...
End-user devices, mobile devices, network devices, and non-computing/IoT devices
End-user devices, network devices, and non-computing/IoT devices
End-user devices, mobile devices, network devices, non-computing/IoT devices, and servers
End-user devices, mobile devices, network devices, and servers
Software inventory includes...
Server and end-user applications, cloud applications, proprietary web applications, and portable-device applications
Operating systems, server and end-user applications, cloud applications, proprietary web applications, and portable-device applications
Operating systems, server and end-user applications, cloud applications, all web applications, and portable-device applications
Server and end-user applications, cloud applications, all web applications, and portable-device applications
True or False. Even though it is preferred to only allow authorized software on organizational systems, it is usually an exception we make for our users.
True
False
True or False. Software that isn't supported by the developer/maker is confirmed as necessary for fulfillment of the organization's mission.
True
False
Unsupported software, without exception, is designated as (a) .
What is best practice when it comes to unauthorized software?
authorize it
quarantine
remove/uninstall
none of the above
What is the minimal expectation of reconciling software inventory to verify software support and review unauthorized software?
Daily
Weekly
Monthly
Quarterly
What is the minimal expectation of reconciling software inventory?
Monthly
Quarterly
Annually
Bi-annually
Maintaining a data inventory that is based on a formalized Data Management Process(es), is important to establish and maintain.
True
False
What is the minimal expectation of reviewing data inventories?
Monthly
Quarterly
Semi-Annual
Annual
When adopting policies, what are two important things to remember?
1. Templates are available, don't reinvent the wheel.
2. Collaboration is the best method when it comes to writing policy.
1. Policies are guidelines, treat them accordingly.
2. Nothing can start until the policies are written so get them done.
1. Do not try to adopt all requirements at first.
2. Adopt the requirements you think can be fulfilled within the next 12 months.
When considering an asset lifecycle, what are the minimum requirements?
Create
Manage
Distribute
Retrieve
Archive
Procurement
Deploy/Discover
Maintain
Support
Disposal
Planning
Acquisition
Operation/ Maintenance
Disposal
Procurement
Maintenance
Disposition
What are three methods for procuring hardware and software? (check any that apply)
Compare
Contrast
Collude
Centralized
De-centralized
Reimbursed
Evaluate
Consult
Purchase
Purchase Orders
Corporate Accounts
Personal funds
When considering procurement process(es), there are two related things to consider:
1. Forms
2. Logs
1. 3rd Party personnel
2. Guests
1. Internal personnel
2. External personnel
The processes for maintaining are extensive. Select all processes that could be included.
Configuration
Patching
Monitoring
None of the above
Once procurement processes are established, start with an inventory of (a) .
What are examples of scanners that can help you do an asset inventory?
BitDefender
NMAP
Nessus
McAfee
Once the network is scanned to compile the asset inventory, investigate assets where there are (a) in the discovery.
Name three things you can do with the network inventory that can improve your security posture.
Nessus can scan software as well but it must be run with (a) .
Cloud services being used can be a challenge. Make sure you monitor (a) for common cloud connections.
With Cloud services, a deeper review of client systems should include:
Web browser syncing and bookmarks
web browser caches and history
user profiles and repeat passwords
All of the above
During the inventory of cloud services, it is common to have conversations with individual users and accounting.
True
False
Which one(s) is/are a good IT asset inventory tool.
Snipe-IT
Nessus
Device42
Solarwinds
External Asset Inventory deals with _______ ________ analysis and monitoring.
(a)
Name an open source tool for doing an external asset inventory.
(a)
