PT0-002 · Question #9
A penetration tester discovers during a recent test that an employee in the accounting department has been making changes to a payment system and redirecting money into a personal bank account. The…
The correct answer is A. Enforce mandatory employee vacations. Mandatory Vacations, Job Rotation and Separation Duties are all three Managerial controls that are part of cert scope. Mandatory vacation will reveal the difference in the way money flows because he/she wouldn't be able to keep doing that while off work.
Question
A penetration tester discovers during a recent test that an employee in the accounting department has been making changes to a payment system and redirecting money into a personal bank account. The penetration test was immediately stopped. Which of the following would be the BEST recommendation to prevent this type of activity in the future?
Options
- AEnforce mandatory employee vacations
- BImplement multifactor authentication
- CInstall video surveillance equipment in the office
- DEncrypt passwords for bank account information
How the community answered
(46 responses)- A74% (34)
- B4% (2)
- C7% (3)
- D15% (7)
Explanation
Mandatory Vacations, Job Rotation and Separation Duties are all three Managerial controls that are part of cert scope. Mandatory vacation will reveal the difference in the way money flows because he/she wouldn't be able to keep doing that while off work.
Topics
Community Discussion
No community discussion yet for this question.