ExpertMedium1 markMultiple Choice
CPA · Question 17 · Area II: Security
In the context of CIS Controls, what is the primary purpose of 'Inventory and Control of Enterprise Assets' (Control 1)?
In the context of CIS Controls, what is the primary purpose of 'Inventory and Control of Enterprise Assets' (Control 1)?
Answer options:
A.
To ensure all software is patched.
B.
To actively manage all hardware devices on the network so that only authorized devices are given access.
C.
To protect data recovery capabilities.
D.
To manage administrative privileges.
How to approach this question
Recall the first and most foundational CIS Control.
Full Answer
B.To actively manage all hardware devices on the network so that only authorized devices are given access.✓ Correct
To actively manage all hardware devices on the network so that only authorized devices are given access.
CIS Control 1 is Inventory and Control of Enterprise Assets. It ensures that unauthorized devices are identified and removed or denied access.
Common mistakes
Confusing hardware inventory (Control 1) with software inventory (Control 2).
Practice the full CPA ISC Practice Exam 2
82 questions · hints · full answers · grading
More questions from this exam
Q01A service organization provides a cloud-based payroll platform where clients access the software ...MediumQ02An auditor is reviewing the backup strategy for a financial institution that requires a Recovery ...HardQ03During a walkthrough of the change management process, an auditor observes that developers have w...MediumQ04An auditor is reviewing a SQL query used to generate a list of active customers for a marketing c...HardQ05Which of the following entities is considered a 'Covered Entity' under the HIPAA Privacy Rule?Medium