200-201 Question 319
Single answerA cybersecurity analyst at an organization is reviewing the asset inventory to identify which devices are critical to the business and require higher security measures. During the process, they notice several devices in the inventory that are no longer in use but still connected to the network. What is the MOST appropriate action the analyst should take to address this issue?
- A
Immediately disconnect the unused devices from the network.
- B
Update the asset inventory to mark the devices as inactive and notify the IT team.
- C
Ignore the devices since they are not being actively used.
- D
Perform a risk assessment on the unused devices to determine their impact on the network.
Show answer and explanation
Correct answer: B
Explanation
Asset management involves maintaining an up-to-date inventory of all assets in a network. Identifying unused devices and marking them as inactive in the asset inventory is a critical step to ensure the organization has visibility into all network-connected devices. This allows the IT and security teams to take informed actions, such as decommissioning or securing unused devices, to mitigate potential risks.
- A. Incorrect.
While disconnecting unused devices might seem like a quick solution, it could disrupt operations if these devices are still being accessed for legacy purposes or maintenance. Proper coordination is required before disconnection.
- B. Correct.
Updating the asset inventory to mark the devices as inactive and notifying the IT team is the correct first step. This ensures accurate asset tracking and allows further actions, such as decommissioning or securing the devices, to be planned appropriately.
- C. Incorrect.
Ignoring the devices is not a recommended cybersecurity practice. Unused devices connected to the network can pose security risks, such as vulnerabilities or unauthorized access.
- D. Incorrect.
Conducting a risk assessment is a valuable step but should come after the devices are properly identified and documented in the asset inventory. Without updating the inventory, the organization may fail to track their presence effectively.