ISC2 Governance, Risk and Compliance (CGRC) Practice Question

During a quarterly self-assessment, you discover that several servers removed from the data center months ago still appear as active in the configuration management database, violating the organization's approved hardware baseline. Which action would most directly strengthen continuous monitoring of physical assets to restore compliance?

  • Deploy an automated discovery solution that updates the CMDB with each device's serial number and location on a scheduled basis.

  • Require technicians to apply tamper-evident asset tags to equipment during initial installation.

  • Schedule a full physical inventory of all racks once each year instead of every two years.

  • Increase video surveillance retention in all data-center areas from 30 to 90 days.

ISC2 Governance, Risk and Compliance (CGRC)
Compliance Maintenance
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot