Certified Information Security Manager CISM · Free Practice Question Easy
Question 59
You are the Information Security Manager of HDA Inc. You are evaluating adherence to the "separation of duties" principle. Which of the following individuals having update rights to the database access control list (ACL) would compromise this principle?
- A A. Database Administrator
- B B. System Administrator
- C C. Application Programmer
- D D. Security Administrator
Reveal correct answer
Correct answer: C
Explanation
Correct Answer: C. Application Programmer Explanation: The "separation of duties" principle aims to prevent a single individual from having conflicting roles or permissions that could lead to misuse or abuse. Granting update rights to the database ACL to an application programmer may introduce a conflict of interest and undermine the principle.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
