215k views
0 votes
An administrator can configure access control functions but is not able to administer audit functions. This is an example of what?

A. Access enforcement
B. Separation of duties
C. Least privilege
D. Account management

1 Answer

5 votes

Final answer:

An administrator with the ability to configure access but not administer audits exemplifies 'Separation of duties'. This is a concept where duties are divided among different individuals to prevent fraud and conflict of interest.

Step-by-step explanation:

The question refers to a scenario where an administrator can configure access control functions but cannot administer audit functions. This is an example of Separation of duties (B). Separation of duties is a fundamental principle of internal control that prevents conflict of interest and fraud by dividing responsibilities among different individuals or roles within an organization. By separating tasks and privileges, it ensures that no single individual has the power to execute all components of a critical task, thereby reducing the risk of misuse or errors.

User Eddysanoli
by
8.2k points