MENU
The purpose of control 5.9 inventory of Information and other associated assets of ISO/IEC 27001 is to identify organization's information and other associated assets in order to preserve their information security and assign ownership. Which of the following actions docs NOT fulfill this purpose?
Suggested Answer: C
Get Premium ISO-IEC-27001-Lead-Implementer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
41 comments · newest first
SU
Susana
10 months ago
I thought regular reviews were just a formality, not a necessity.
LU
Lura
11 months ago
Establishing access rules is definitely part of the process.
PE
Peggie
11 months ago
Wait, are we sure about that? Seems like all options are important.
ED
Edna
11 months ago
Totally agree, assigning ownership is key!
JA
Jaime
11 months ago
Regular reviews are essential for asset management.
RE
Reita
12 months ago
I'm a bit confused; I thought all these actions were important for asset management. Maybe option C is the one that doesn't quite fit?
LU
Luisa
12 months ago
I practiced a similar question where we had to determine the purpose of asset management controls. I feel like option A is definitely part of the process.
SH
Shawn
12 months ago
I think option B might not directly relate to identifying assets, since it's more about access control rather than inventorying them.
SI
Simona
1 year ago
I remember that control 5.9 is all about identifying and managing assets, but I'm not sure which option doesn't fit.
WI
Wilford
1 year ago
The key here is to identify the action that doesn't fulfill the purpose of identifying and assigning ownership of information assets. I think I've got this.
CA
Catrice
1 year ago
I'm not totally confident about this one, but I'll give it my best shot and eliminate the options that don't seem to align with the purpose.
GA
Garry
1 year ago
Okay, I need to focus on the key purpose of the control, which is to identify and assign ownership of information assets. The options seem to be testing my understanding of that.
TE
Tesha
1 year ago
Hmm, I'm a bit unsure about the purpose of this control. Let me re-read the question carefully.
OZ
Ozell
1 year ago
This question seems straightforward, I think I can handle it.
BO
Bo
1 year ago
Hmm, I'm a bit confused on this one. I'm not sure if I should go with the Master-detail relationships or the Lookup relationships. I'll need to think it through carefully before answering.
PA
Paola
1 year ago
I'm a little confused on this one. I was thinking the purpose was more about identifying the specific risk factors, so I was leaning towards C - "What exactly is being exposed to the risk?". But now I'm second-guessing myself after hearing the other options. Guess I'll have to re-read the question carefully and think it through.
DI
Dianne
1 year ago
Hmm, I'm a bit unsure about this one. I know we covered web service references in class, but I can't quite recall all the details. I'll have to think this through carefully.
AN
Annabelle
1 year ago
I'm pretty sure the answer is B. Controlling access is like the foundation of information security, not something that's optional.
BR
Brandon
1 year ago
Hmm, I don't know. Maybe I should just 'asset' my way through this question and hope for the best.
LA
Lashaunda
1 year ago
I think option B does NOT fulfill the purpose
LE
Leota
1 year ago
C) Assigning the responsibility for appropriately classifying and protecting information and other associated assets to the asset owners
TA
Tamekia
1 year ago
B) Establishing rules to control physical and logical access to Information and other associated assets
GA
Garry
1 year ago
A) Conducting regular reviews of identified information and other associated assets
SU
Suzan
1 year ago
C) Assigning the responsibility for appropriately classifying and protecting information and other associated assets to the asset owners
ER
Eric
1 year ago
B) Establishing rules to control physical and logical access to Information and other associated assets
JE
Jesse
1 year ago
A) Conducting regular reviews of identified information and other associated assets
CL
Clorinda
1 year ago
Wait, are we supposed to be protecting the assets or the assets' feelings? Because if it's the latter, then option C is the way to go.
AL
Alise
1 year ago
C) Assigning the responsibility for appropriately classifying and protecting information and other associated assets to the asset owners
PA
Paulina
1 year ago
B) Establishing rules to control physical and logical access to Information and other associated assets
MA
Macy
1 year ago
A) Conducting regular reviews of identified information and other associated assets
OC
Octavio
1 year ago
Option A seems like the right choice to me. Conducting regular reviews to ensure the identified assets are up-to-date is essential for this control.
TA
Tarra
1 year ago
I think all the options fulfill the purpose of control 5.9 inventory of Information and other associated assets.
SA
Salena
1 year ago
Assigning responsibility to asset owners is key in protecting information and assets.
AR
Arlette
1 year ago
Establishing rules for controlling access is also important to ensure information security.
MI
Millie
1 year ago
I agree, conducting regular reviews is crucial for keeping track of the organization's assets.
RE
Rebbecca
2 years ago
I think option B is the correct answer. Establishing rules to control access is crucial for preserving information security, not something that doesn't fulfill the purpose.
MA
Marcelle
1 year ago
User 2: I agree, establishing rules to control access is crucial for preserving information security.
BE
Bev
1 year ago
User 1: I think option B is the correct answer.
AL
Alex
2 years ago
I think the answer is C) Assigning the responsibility for appropriately classifying and protecting information and other associated assets to the asset owners because it directly relates to assigning ownership and preserving information security.
JU
Julian
2 years ago
I disagree, I believe the answer is B) Establishing rules to control physical and logical access to Information and other associated assets.
BA
Barb
2 years ago
I think the answer is A) Conducting regular reviews of identified information and other associated assets.