Correct Option: A. Re-use of old password Explanation of Why the Answer is Correct: Re-using old passwords is not a good ICT (Information and Communication Technology) security policy for several reasons:

1. Vulnerability to Attacks: When users re-use old passwords, they increase the risk of their accounts being compromised. If an attacker gains access to a password from a previous breach, they can use that same password to access other accounts where the user has re-used it. This is particularly dangerous if the old password is weak or has been exposed in a data breach.
2. Password Management Best Practices: Security best practices recommend that users create unique passwords for each account and change them regularly. Re-using old passwords contradicts this principle, as it does not enhance security and can lead to a false sense of security.
3. Password Aging Policies: Many organizations implement password aging policies that require users to change their passwords after a certain period. Re-using old passwords would violate these policies and could lead to non-compliance with security regulations.
4. User Behavior: Users often tend to forget old passwords, leading them to use variations of the same password or revert to previously used passwords. This behavior can create a cycle of weak password practices, making it easier for attackers to guess or crack passwords.

Explanation of Why the Other Options Are Weaker or Incorrect: B. Frequent change of password - Why It’s Not the Correct Answer: Frequent password changes are generally considered a good security practice, especially if combined with other measures like complexity requirements. Regularly changing passwords helps to mitigate the risk of unauthorized access, especially if a password has been compromised without the user's knowledge. However, it is important that users are educated on creating strong, unique passwords rather than just changing them to something similar. C. Backing up files and documents - Why It’s Not the Correct Answer: Backing up files and documents is a critical component of any ICT security policy. It ensures that data can be recovered in the event of data loss due to hardware failure, cyber-attacks (like ransomware), or accidental deletion. Regular backups protect against data loss and are a fundamental aspect of data integrity and security. D. Scanning e-mail attachment for virus before opening it - Why It’s Not the Correct Answer: Scanning email attachments for viruses is an essential security measure. It helps to prevent malware infections that can occur when users open infected attachments. This practice is a proactive approach to security, reducing the risk of spreading viruses and protecting both individual users and organizational networks. Summary of Key Points:

• Re-using old passwords increases vulnerability and contradicts security best practices.
• Frequent password changes are beneficial if done correctly, promoting better security.
• Backing up files is crucial for data recovery and integrity.
• Scanning email attachments is a necessary step to prevent malware infections.

By understanding these principles, students can better prepare for professional exams and apply these security practices in real-world scenarios.