Discuss PECB ISO-IEC-27001-Lead-Implementer Exam Topic 1 Question 67

According to ISO/IEC 27001 controls, why should the use of privileged utility programs be restricted and tightly controlled?

ATo ensure that utility programs are compatible with existing system software

BTo prevent misuse of utility programs that could override system and application controls

CTo enable the correlation and analysis of security-related events

Suggested Answer: B

ISO/IEC 27002:2022 Clause 8.11 addresses ''Use of privileged utility programs'':

'The use of utility programs that might be capable of overriding system and application controls should be restricted and tightly controlled to prevent misuse.'

Such tools can provide powerful access or modification capabilities, which if misused can compromise the integrity and confidentiality of systems.

ISO/IEC 27002:2022 Clause 8.11

ISO/IEC 27001:2022 Annex A Control A.8.11

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

21 comments · newest first

Nickole 1 month ago

Definitely B. Control is key to prevent unauthorized access.

Van 1 month ago

A seems less relevant. Compatibility isn't the main concern here.

Alishia 1 month ago

But B really highlights the risk of misuse. That's crucial!

Susana 2 months ago

C is also important. We need to analyze events for better security.

Dannie 2 months ago

Agreed! Utility programs can bypass controls if not managed.

German 2 months ago

I think B is the best answer. Misuse can lead to serious security issues.

Stevie 2 months ago

I feel like all options have merit, but B stands out for security.

Casey 2 months ago

Definitely B. We need to protect our systems from potential threats.

Lorrine 2 months ago

C is relevant, but it doesn’t address the misuse directly.

Vicki 3 months ago

A is too narrow. Compatibility isn’t the main concern here.

Jerlene 3 months ago

Agreed! If not controlled, they can bypass important safeguards.

Magnolia 3 months ago

I think B is the best choice. Misuse can lead to serious security risks.

Hector 3 months ago

Are we sure restricting them is enough? Seems like a band-aid solution.

Tamala 3 months ago

Wow, I didn’t realize how risky utility programs could be!

Aretha 4 months ago

C sounds good, but is it really a priority over preventing misuse?

Nettie 5 months ago

I think A is important too, but not as critical as B.

Dona 5 months ago

B is definitely the main reason! Misuse can lead to huge issues.

Francisca 6 months ago

I thought it was also about ensuring compatibility, but I lean towards B since misuse seems like a bigger risk.

Paul 6 months ago

I have a vague recollection that these utility programs can really mess things up if not controlled properly. Maybe it’s about preventing unauthorized access?

Mollie 6 months ago

I remember a practice question that emphasized the importance of controlling these programs to maintain system integrity. It feels like B is the right choice.

Hyun 6 months ago

I think restricting privileged utility programs is mainly about preventing misuse, but I'm not entirely sure if that's the only reason.

PECB ISO-IEC-27001-Lead-Implementer Exam - Topic 1 Question 67 Discussion