The correct answer is To catalog all hardware and software assets across the organization.

Asset identification is focused on creating a comprehensive inventory of devices, applications, and services so security and IT teams know what exists and where it is located. A complete catalog enables accurate risk assessment, timely patching, consistent configuration management, license compliance, and informed prioritization of security work. Because it establishes what must be protected, the inventory is the foundational activity for other security and operational processes.

To enable vulnerability management and support incident response is incorrect because those activities are important uses of an asset inventory but they are downstream processes. Identification creates the inventory that enables vulnerability handling and incident work but it is not limited to enabling those functions.

To assign ownership and track the lifecycle of assets is incorrect because assigning owners and managing lifecycles are management tasks that occur after assets are identified. Identification is about discovery and cataloging while ownership and lifecycle tracking are part of ongoing asset management.

To record only tangible equipment such as servers and workstations is incorrect because modern asset inventories must include software, virtual machines, cloud resources, containers, and data as well as physical devices. Limiting identification to only tangible equipment omits many assets that affect security.

Full AWS Practitioner Certification Question