How Does Device Labeling and Employee ID Association Enhance Security?

SY0-701 By islever Editorial Last updated

Short answer

A If a security incident occurs on the device, the correct employee can be notified.

Question

A company has begun labeling all laptops with asset inventory stickers and associating them with employee IDs. Which of the following security benefits do these actions provide? (Choose two.)
  1. If a security incident occurs on the device, the correct employee can be notified. Correct Answer
  2. The security team will be able to send user awareness training to the appropriate device.
  3. Users can be mapped to their devices when configuring software MFA tokens.
  4. User-based firewall policies can be correctly targeted to the appropriate laptops.
  5. When conducting penetration testing, the security team will be able to target the desired laptops.

Key Takeaways

This question tests whether candidates understand that physical asset tagging primarily serves administrative accountability and identity mapping, rather than automatically triggering technical enforcement mechanisms.

Linking physical hardware to user identities establishes clear accountability and enables precise identity-to-device binding for authentication workflows. The community consensus identifies incident notification and MFA token mapping as the direct security benefits.

Common mistake: Candidates frequently select options involving automated technical controls because they mistakenly assume physical labels directly integrate with network infrastructure or learning management systems without manual configuration.

Expert Analysis

Core Concept: Asset Accountability and Identity Binding

Associating laptops with asset inventory stickers and employee IDs establishes a foundational asset registry that bridges physical hardware with logical identity management. In enterprise security, this practice is critical for maintaining a clear chain of custody and enabling rapid operational responses.

Why Options A and C Are Correct

Option A is correct because linking a device to a specific employee creates immediate accountability. If malware infects the laptop or sensitive data is exfiltrated, the security operations center (SOC) can instantly identify and notify the responsible user, drastically reducing mean time to respond (MTTR). As noted by community analysts, this direct correlation is the primary governance benefit of asset tagging.

Option C is correct because modern Identity and Access Management (IAM) frameworks rely on device-user binding. By mapping employee IDs to specific hardware, administrators can accurately assign software-based MFA tokens, enforce conditional access policies, and ensure that cryptographic credentials are issued only to authorized endpoints. This prevents credential sprawl and ensures authentication events are tied to verified users and devices.

Why Other Options Are Incorrect

Option B is incorrect because user awareness training is typically distributed via email, Learning Management Systems (LMS), or Mobile Device Management (MDM) platforms. Physical asset stickers have no technical mechanism to push or track training completion.

Option D is incorrect because firewall policies operate at the network layer using IP addresses, MAC addresses, VLANs, or Active Directory groups. An asset sticker does not automatically sync with network security appliances to enforce user-based rules; that requires endpoint discovery tools and policy engines.

Option E is incorrect because penetration testing scopes are defined by risk assessments and business objectives, not physical inventory tags. Targeting specific laptops solely based on stickers would violate ethical hacking principles and scope agreements.

Note on Exam Variations: Some dump versions include an unlisted Option F regarding data accounting during employee offboarding. While highly relevant to asset lifecycle management, among the provided choices, A and C represent the most direct security and identity governance benefits recognized in the SY0-701 curriculum.

Official Reference

  • NIST SP 800-53 Rev. 5 - CM-8 (System Component Inventory)
  • CompTIA Security+ SY0-701 Official Study Guide - Domain 1 & 2

These links open the official vendor documentation in a new tab.

Exam Strategy

When evaluating asset management controls, distinguish between administrative accountability (ownership, audit trails, notification) and automated technical enforcement. CompTIA frequently tests whether you recognize that physical labeling alone establishes governance context, not instant network or application-level automation. Always prioritize answers that align with identity binding, incident response workflows, and compliance tracking.

Community Votes

AC
100%

100% of anonymous learners picked answer AC. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 32 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 30 of 32

  1. SHADTECH123 👍 10
    AC A. If a security incident occurs on the device, the correct employee can be notified. By associating devices with specific employees, the security team can quickly identify and notify the responsible employee in the event of a security incident. This helps in timely incident response and remediation. C. Users can be mapped to their devices when configuring software MFA tokens. Associating devices with employee IDs allows for accurate mapping of users to their devices. This is particularly important when setting up and managing multi-factor authentication (MFA) tokens, ensuring they are configured for the correct devices and users.
  2. dbrowndiver 👍 4 Answered A
    Mapping users to devices for MFA purposes might be helpful, but the main goal of labeling is inventory and asset management. MFA typically involves software or mobile applications associated with a user's account rather than being device-dependent.
  3. Damique 👍 4
    Although asset tagging helps track hardware, it does not directly account for ensuring data is removed or preserved when employees leave.
  4. Innana 👍 4 Answered A
    We had that question in the course and A and F were correct answers
  5. noragami 👍 3
    A. If a security incident occurs on the device, the correct employee can be notified. Associating devices with employee IDs allows the security team to quickly identify and notify the responsible employee in the event of a security incident. This helps in taking prompt action and mitigating potential risks. C. Users can be mapped to their devices when configuring software MFA tokens. By mapping devices to specific employees, it becomes easier to configure and manage software multi-factor authentication (MFA) tokens, ensuring that the correct tokens are assigned to the correct users and their associated devices.
Show 25 more comments
  1. metzen227 👍 3
    C. Users can be mapped to their devices when configuring software MFA tokens. This is a potential benefit. Associating laptops with employee IDs can aid in the management of multi-factor authentication (MFA) tokens, ensuring that the right tokens are assigned to the correct users and devices. D. User-based firewall policies can be correctly targeted to the appropriate laptops. This is a valid benefit. By associating laptops with employee IDs, user-based firewall policies can be effectively applied to the appropriate devices, enhancing security by enforcing tailored policies for different users.
  2. babujiju 👍 3
    A. If a security incident occurs on the device, the correct employee can be notified. Asset inventory stickers and association with employee IDs help identify the user responsible for a device, making it possible to notify them if a security incident occurs. C. Users can be mapped to their devices when configuring software MFA tokens. Associating devices with employee IDs ensures that software Multi-Factor Authentication (MFA) tokens can be correctly configured for the right user on the right device.
  3. pabloudemy1 👍 3
    I have some doubts on option F, as I understand C fits better: "Ownership: ... When assets are assigned to specific owners, it becomes easier to enforce accountability for their condition and usage. ... Access control mechanisms, such as user authentication and authorization are often tied to ownership to ensure that only authorized individuals can interact with the asset" . Ian Neil SY0-701 Cert. Guide
  4. TmNvrWts 👍 3
    F. Company data can be accounted for when the employee leaves the organization.: While asset tracking helps manage hardware, accounting for data is a broader process involving data access and permissions, not just inventory stickers.
  5. chalaka 👍 3 Answered A
    A. If a security incident occurs on the device, the correct employee can be notified. F. Company data can be accounted for when the employee leaves the organization.
  6. tamdod 👍 3
    A, F my token can be used on multiple devices so it isn't C.
  7. e5c1bb5 👍 3 Answered A
    based on prof messer study guide i think AF are correct.
  8. BFG_Nick 👍 3
    AC because that’s what we use at my company
  9. Oluwatobi4880 👍 2
    The answer is not A and F because of the specific nature of the security benefits related to inventory stickers and employee IDs. Let's break down why: A. If a security incident occurs on the device, the correct employee can be notified. This option makes sense as a benefit because labeling and associating devices with employee IDs allow for the effective tracking and notification of the relevant employee in case of a security incident on their device. F. Company data can be accounted for when the employee leaves the organization. While this seems relevant, the actual process of accounting for company data when an employee leaves is broader and involves policy and process beyond simply labeling a device. Although asset tracking helps with inventory management, the label itself doesn't directly manage or account for the data on the device when an employee departs. Instead, the more direct security benefits from labeling devices would be: C. Users can be mapped to their devices when configuring software MFA tokens.
  10. darpanne 👍 2
    Explanation: A. If a security incident occurs on the device, the correct employee can be notified: C. Users can be mapped to their devices when configuring software MFA tokens: Multi-Factor Authentication (MFA) tokens are often linked to specific devices. By mapping employee IDs to laptops, administrators can ensure MFA configurations are correctly associated with the right users and their devices. Why not the F? F. Company data can be accounted for when the employee leaves the organization: While asset tagging helps track physical assets, it does not inherently account for company data stored on those devices.
  11. QFox 👍 2
    A.) If laptops are associated with employee IDs, it makes sense that in the event of a security incident (e.g., malware detection, suspicious activity), the security team will know which employee is responsible for that device. They can notify the correct person and take action. C.) Associating a device with a user ID can make it easier to set up software Multi-Factor Authentication (MFA) tokens. Knowing which device is linked to which employee ensures the MFA configuration is tied to the correct person and device
  12. Gigi42 👍 2 Answered C
    I choose C and F because it more relates aligns with data security more than the other options. If there is security beach, why would I notify the employee? Everyone is considered a suspect until proven otherwise, so choice A is out for me. The other options can be use as well but C & F fits to what this exam is all about.
  13. Aces155 👍 2
    AC, I think everyone can agree with A. I’m choosing C over F because when they had us set up MFA pins at work they said it was more secure than passwords because it validated our device to our identity and the pin would only work on our specific laptops
  14. NONS3c 👍 2
    A and C correct because F , because labeling laptops with asset inventory stickers and associating them with employee id primary help track physical devices and identify the user of the device ut doesn't directly ensure the company data is accounted for
  15. Russell15 👍 2 Answered A
    Every one agrees A: I say F because when employees leave the company, their assigned device can be tracked, retrieved, and properly wiped to ensure company data is not lost or leaked. Most MFAs are configured per user not per device.
  16. cdsu 👍 2
    Answer: A & C A: In in the event of a security incident security team can quickly identify and notify the responsible employee. C: With this ensures that MFA tokens are correctly assigned to the appropriate users and devices.
  17. agp2684 👍 2 Answered A
    It should be A and F, although option A isn't 100% realistic. Why? The question mentioned only that they are adding asset stickers, but simply having a sticker doesn't mean that the asset ID matches with the computer name
  18. Bito808 👍 2
    It cannot be F because "asset" management does not account for "data". C makes more sense because asset management includes internal assets, which may map network printers and other internal LAN assets.
  19. 4d110ce 👍 2
    A. This ensures timely response and accountability. C. ensures that the tokens are issued to and used by the correct devices.
  20. Konversation 👍 1 Answered A
    AF There are no doubts about A. C or F is the question. While both are reasonable, there is no reference to MFA in the CompTIA Student Guide nor their WBT related to Asset Management. The strongest reference is "Assigning asset ownership involves designating specific individuals or teams within the organization as responsible for particular assets to establish a clear chain of accountability for asset security, maintenance, and ongoing management". This means, F is more likely excepted in the exam, in my opinion.
  21. Jimmy1017 👍 1 Answered A
    AF makes the most sense, since most of us agree on F I say A is correct because if an incident occurs knowing the proper person(s) is critical to mitigate the attack.
  22. gavin1776 👍 1
    I don't see the answer being F. It would help account for company property, but how would asset tags help account for data?
  23. Fagann 👍 4 Answered A
    The correct answer is AF
  24. ITExperts 👍 3 Answered A
    has to be A and F
  25. Murtuza 👍 2 Answered A
    AF is the correct answer

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide