UGC NET Questions (Paper – 1)

An information security policy sets out principles and rules to protect institutional information assets, including data, systems and networks. It covers issues such as user responsibilities, password management, incident reporting and sanctions for misuse. Such policies guide technical and administrative controls to mitigate risks. Therefore, the documents described in the stem are information security policies.

Option A:
Option A, cafeteria, policy would deal with canteen operations and is unrelated to network and password use.

Option B:
Option B is correct because the focus on acceptable use of ICT resources and security incident procedures is central to an information security policy as defined in standards and guidelines.

Option C:
Option C, transportation, policy would cover commute or vehicle regulations and has no connection with ICT networks.

Option D:
Option D, alumni, policy concerns engagement with former students and not security of digital resources.

Statements A, B and D properly describe the role and implications of AUPs, whereas C is incorrect. Policies must be accompanied by ongoing education so that users understand why rules exist and how to act responsibly online. AUPs typically cover security, privacy and legal issues, and violations can attract sanctions. Thus, the correct combination is A, B and D only.

Option A:
Option A is incomplete because it lists only A and B and omits D. While defining policies and their scope is important, recognising potential consequences provides a fuller understanding of why compliance matters.

Option B:
Option B is incorrect because it treats A, B and C as correct statements and thereby accepts C. Statement C ignores the need for continuous awareness-building about ethics and digital citizenship, so including it makes this option wrong.

Option C:
Option C is correct because it selects the three true statements and explicitly excludes C, which minimises the importance of user education. It shows that policy documents and educational initiatives must work together.

Option D:
Option D is incorrect because it groups B, C and D as correct, accepting C and omitting A. Leaving out the basic definition of AUP and including a false statement undermines the answer.