ITPEC IP April 2018 Question 36
Topic: Security
Among information security measures A through D implemented in the workplace to maintain the “confidentiality” and “integrity” of information, which of the following is a list of only the appropriate measures?
A:PCs should remain unlocked to keep them ready for operation from the start to the end of the business day.B:Documents and electronic storage media, such as CD-R containing important information, should be stored in locked cabinets except when they are used.C:Documents sent or received by facsimile should be picked up immediately without being left unattended on the tray.D:Messages or information written on the whiteboard should be erased immediately after use.
Explanation
B, C, D — each keeps information from being seen, taken or altered by someone unauthorised.
- •A An unlocked PC left ready all day lets anyone who passes read or change its data while the user is away: not appropriate. Lock the screen whenever leaving the desk.
- •B Locking away documents and media when not in use prevents them being read, copied or taken: appropriate.
- •C Collecting faxes at once stops others reading or removing them from the tray: appropriate.
- •D Erasing the whiteboard after use stops later visitors reading what was written: appropriate.
Answer (d)
Why not others:
- •(a) A, B — includes the unsafe A and omits C and D
- •(b) A, B, D — includes the unsafe A and omits C
- •(c) B, D — omits C, which is also appropriate
Key rule: Clear desk and clear screen: lock unattended PCs, put media away, collect printouts and faxes promptly, and erase temporary notes.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.