Discuss PECB ISO-IEC-27001-Lead-Auditor Exam Topic 2 Question 60

In acceptable use of Information Assets, which is the best practice?

AAccess to information and communication systems are provided for business purpose only

BInterfering with or denying service to any user other than the employee's host

CPlaying any computer games during office hours

DAccessing phone or network transmissions, including wireless or wifi transmissions

Suggested Answer: A

The best practice in acceptable use of information assets is A: access to information and communication systems are provided for business purpose only. This means that the organization grants access to its information and communication systems only to authorized users who need to use them for legitimate and approved business activities. The organization does not allow or tolerate any unauthorized, inappropriate or personal use of its information and communication systems, as this could compromise information security, violate policies or laws, or cause damage or harm to the organization or its stakeholders. The other options are not best practices in acceptable use of information assets, as they could violate information security policies and procedures, as well as ethical or legal standards. Interfering with or denying service to any user other than the employee's host (B) is a malicious act that could disrupt the availability or performance of the information systems or services of another user or organization. Playing any computer games during office hours is a personal and unprofessional use of the information and communication systems that could distract the employee from their work duties, waste resources and bandwidth, or expose the systems to malware or other risks. Accessing phone or network transmissions, including wireless or wifi transmissions (D) is a potential breach of confidentiality or privacy that could intercept, monitor or modify the information transmitted by another user or organization without their consent or authorization. ISO/IEC 27001:2022 requires the organization to implement rules for acceptable use of assets (see clause A.8.1.3).Reference:CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course,ISO/IEC 27001:2022 Information technology --- Security techniques --- Information security management systems --- Requirements,What is Acceptable Use?

Get Premium ISO-IEC-27001-Lead-Auditor Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

32 comments · newest first

Albina 10 months ago

D could lead to serious security issues, not cool!

Micah 10 months ago

B seems a bit extreme, isn't that illegal?

Ricarda 10 months ago

Wait, are people really playing games at work?

Loren 10 months ago

Totally agree, A keeps things professional.

Maxima 11 months ago

A is definitely the best practice!

Margot 11 months ago

D seems risky since accessing unauthorized transmissions could lead to security issues, so I’m leaning towards A as the safest choice.

Marquetta 11 months ago

I definitely recall that playing games during work hours is a big no-no, so C can't be right.

Jessenia 11 months ago

I'm not entirely sure, but I remember something about not interfering with other users, which makes me hesitate about B.

Edmond 12 months ago

I think the best practice is related to using information assets strictly for business purposes, so I might go with A.

Jerilyn 12 months ago

I'm a little confused by this question. The options seem to cover a range of different IT policies and practices. I'll have to re-read the question and options closely to make sure I understand what they're asking for the "best practice."

Lenora 12 months ago

Okay, I think I've got this. The key is to focus on the concept of "acceptable use" of information assets. That means the best practice is the one that aligns with appropriate, authorized business use. I'm going with A.

Rhea 1 year ago

Hmm, I'm a bit unsure about this one. I'll have to think it through carefully. Maybe I should eliminate the obviously wrong answers first and then decide between the remaining options.

Natalya 1 year ago

This question seems pretty straightforward. I'm pretty confident that the best practice is option A - access to information and communication systems should be provided for business purposes only.

Julio 1 year ago

This is a no-brainer. Option A is the only answer that makes sense. Unless you want to get fired, that is.

Mollie 1 year ago

↳ replying to Julio

User 3: Definitely, we should always use information assets for business purposes only.

My 1 year ago

↳ replying to Julio

User 2: My is right, that's the best practice.

Leonor 1 year ago

↳ replying to Julio

User 1: Option A) Access to information and communication systems are provided for business purpose only

Minna 1 year ago

Option D sounds like a great way to get into some serious trouble. I'll pass on that one.

Abel 1 year ago

Playing games during office hours? Really? Option C is just asking for trouble.

Tawna 1 year ago

I'm going with Option B. Interfering with other users is not cool, even if it's just for fun.

Twana 1 year ago

↳ replying to Tawna

D) Accessing phone or network transmissions, including wireless or wifi transmissions

Georgene 1 year ago

↳ replying to Tawna

Yes, I agree. It's important to respect other users and not interfere with their access.

Stevie 1 year ago

↳ replying to Tawna

B) Interfering with or denying service to any user other than the employee's host

Jestine 1 year ago

↳ replying to Tawna

A) Access to information and communication systems are provided for business purpose only

Raina 1 year ago

Option A is definitely the best practice. We should only use business systems for their intended purpose.

Barbra 1 year ago

↳ replying to Raina

Accessing phone or network transmissions without permission is a big no.

Willow 1 year ago

↳ replying to Raina

Playing computer games during office hours is definitely not acceptable.

Felix 1 year ago

↳ replying to Raina

It's important to respect the purpose of the systems we use.

Marlon 1 year ago

↳ replying to Raina

I agree, we should only use information assets for business purposes.

Sherill 1 year ago

I also think A is the best practice. It helps prevent unauthorized access and protects sensitive information.

Hillary 1 year ago

I agree with Wilda. It's important to use company resources for work purposes only to maintain security and confidentiality.

Wilda 1 year ago

I think the best practice is A) Access to information and communication systems are provided for business purpose only.

PECB ISO-IEC-27001-Lead-Auditor Exam - Topic 2 Question 60 Discussion