nerdexam
IIA

IIA-CIA-PART3 · Question #23

During an audit of the payroll system, the internal auditor identifies and documents the following condition: "Once a user is logged into the system, the user has access to all functionality within…

The correct answer is B. The system authorization of the user does not correctly reflect the access rights intended. See the full explanation below for the reasoning.

Question

During an audit of the payroll system, the internal auditor identifies and documents the following condition:

"Once a user is logged into the system, the user has access to all functionality within the system." What is the most likely root cause for tins issue?

Options

  • AThe authentication process relies on a simple password only, which is a weak method of
  • BThe system authorization of the user does not correctly reflect the access rights intended.
  • CThere was no periodic review to validate access rights.
  • DThe application owner apparently did not approve the access request during the provisioning

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    72% (13)
  • C
    17% (3)
  • D
    6% (1)

Community Discussion

No community discussion yet for this question.

Full IIA-CIA-PART3 Practice