nerdexam
Isaca

CISA · Question #116

Effective separation of duties in an online environment can BEST be achieved by utilizing:

The correct answer is B. access authorization tables.. Effective separation of duties in an online environment is best achieved by implementing access authorization tables, which technically restrict users to only the functions necessary for their specific roles.

Submitted by fatema_kw· Apr 18, 2026Protection of Information Assets

Question

Effective separation of duties in an online environment can BEST be achieved by utilizing:

Options

  • Aappropriate supervision.
  • Baccess authorization tables.
  • Ctransaction logging.
  • Dwritten procedure manuals.

How the community answered

(20 responses)
  • B
    95% (19)
  • D
    5% (1)

Why each option

Effective separation of duties in an online environment is best achieved by implementing access authorization tables, which technically restrict users to only the functions necessary for their specific roles.

Aappropriate supervision.

Appropriate supervision is a compensatory control or a general management practice but does not technically enforce separation of duties in an online system.

Baccess authorization tables.Correct

Access authorization tables, often implemented as role-based access control (RBAC), provide a technical enforcement mechanism to separate duties by defining and restricting what specific users or roles can do within an application. This ensures that no single individual has conflicting permissions that could lead to fraud or error, directly achieving separation of duties.

Ctransaction logging.

Transaction logging provides an audit trail of actions performed but does not prevent unauthorized combinations of duties from being executed.

Dwritten procedure manuals.

Written procedure manuals document responsibilities but rely on human adherence and do not technically enforce separation of duties within a system.

Concept tested: Separation of duties technical controls

Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/security-governance-rbac

Topics

#Separation of Duties#Access Control#Internal Controls#Information Security

Community Discussion

No community discussion yet for this question.

Full CISA Practice