Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

PECB ISO-IEC-27001-Lead-Implementer Exam - Topic 1 Question 67 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam
Question #: 67
Topic #: 1
[All ISO-IEC-27001-Lead-Implementer Questions]

According to ISO/IEC 27001 controls, why should the use of privileged utility programs be restricted and tightly controlled?

Show Suggested Answer Hide Answer
Suggested Answer: B

ISO/IEC 27002:2022 Clause 8.11 addresses ''Use of privileged utility programs'':

'The use of utility programs that might be capable of overriding system and application controls should be restricted and tightly controlled to prevent misuse.'

Such tools can provide powerful access or modification capabilities, which if misused can compromise the integrity and confidentiality of systems.


ISO/IEC 27002:2022 Clause 8.11

ISO/IEC 27001:2022 Annex A Control A.8.11

Contribute your Thoughts:

0/2000 characters
Nettie
18 days ago
I think A is important too, but not as critical as B.
upvoted 0 times
...
Dona
23 days ago
B is definitely the main reason! Misuse can lead to huge issues.
upvoted 0 times
...
Francisca
1 month ago
I thought it was also about ensuring compatibility, but I lean towards B since misuse seems like a bigger risk.
upvoted 0 times
...
Paul
1 month ago
I have a vague recollection that these utility programs can really mess things up if not controlled properly. Maybe it’s about preventing unauthorized access?
upvoted 0 times
...
Mollie
2 months ago
I remember a practice question that emphasized the importance of controlling these programs to maintain system integrity. It feels like B is the right choice.
upvoted 0 times
...
Hyun
2 months ago
I think restricting privileged utility programs is mainly about preventing misuse, but I'm not entirely sure if that's the only reason.
upvoted 0 times
...

Save Cancel