Which statement best describes the primary security purpose of maintaining a complete and accurate hardware and software asset inventory in an enterprise?
- AIt records the purchase price of each device so that finance can calculate annual depreciation for the company accounts.
- BIt gives the security team a definitive list of what must be protected, patched, and monitored, so that no system is missed during vulnerability and incident response activities. Correct
- CIt replaces the need for a separate configuration management database by storing the running configuration of every device in a single shared spreadsheet.
- DIt allows users to self-register any device they bring from home so that the helpdesk can ship support tickets directly to the device owner.
Why A is wrong: Tracking depreciation is a finance and accounting outcome, not the security purpose of an asset inventory, so this misframes the control even though inventories often feed cost reporting.
Why B is correct: An accurate inventory is the foundation for protecting, patching, and monitoring assets, because controls cannot be applied to systems that defenders do not know exist.
Why C is wrong: Inventories list assets and their owners, not full running configurations, and they complement a configuration management database rather than replacing it, so this overstates the inventory's role.
Why D is wrong: Self-registration of personal devices is a bring-your-own-device workflow, not the security purpose of an enterprise asset inventory, which exists to give defenders authoritative coverage of corporate assets.