Question

To determine that user ID and password controls are functioning, an auditor would most likely _____________.

Answer 1

An auditor would likely conduct tests of controls to verify that user ID and password controls are functioning by reviewing system settings, performing login attempts, and checking user access logs.

Step-by-step explanation:

To determine that user ID and password controls are functioning, an auditor would most likely conduct tests of controls. The auditor may perform actions such as attempting to log in with incorrect credentials to ensure that the system appropriately denies access.

Additionally, the auditor might review system settings to verify password complexity requirements, change management processes, and enforce lockout policies.

They may also examine user access logs to detect any irregular login activity and validate procedures for the creation, modification, and deactivation of user accounts.