IIA
IIA-CIA-PART3 · Question #23
During an audit of the payroll system, the internal auditor identifies and documents the following condition: "Once a user is logged into the system, the user has access to all functionality within…
The correct answer is B. The system authorization of the user does not correctly reflect the access rights intended. See the full explanation below for the reasoning.
Question
During an audit of the payroll system, the internal auditor identifies and documents the following condition:
"Once a user is logged into the system, the user has access to all functionality within the system." What is the most likely root cause for tins issue?
Options
- AThe authentication process relies on a simple password only, which is a weak method of
- BThe system authorization of the user does not correctly reflect the access rights intended.
- CThere was no periodic review to validate access rights.
- DThe application owner apparently did not approve the access request during the provisioning
How the community answered
(18 responses)- A6% (1)
- B72% (13)
- C17% (3)
- D6% (1)
Community Discussion
No community discussion yet for this question.