Câu 1: CIA-PART2-2025: CIA Part 2 - Internal Audit Engagement
An internal auditor needs to test logical controls to determine whether all users access the organization's enterprise resource planning system according to the principle of least privilege. Which engagement procedure would be most effective in carrying out this test?
Nội dung câu hỏi
An internal auditor needs to test logical controls to determine whether all users access the organization's enterprise resource planning system according to the principle of least privilege. Which engagement procedure would be most effective in carrying out this test?
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. Obtain the user access list created by management that shows user roles and permissions, and observe the actions of a sample of users for consistency.
- B. Generate a user access list from the system that shows roles and permissions, and observe the actions of a sample of users for consistency.
- C. Generate a user access list from the system that shows roles and permissions, and use access rights management software to confirm permissions. — đáp án hiện tại
- D. Obtain the user access list created by management that shows user roles and permissions, and compare with job descriptions for consistency.
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.
Chưa có bình luận. Mở giao diện tương tác để bắt đầu thảo luận.