Mandatory vacations are a security control which can be used to uncover which of the following?

The correct answer is A. Fraud committed by a system administrator. Mandatory vacations (also called mandatory leave) are a detective control specifically designed to uncover fraud, embezzlement, or policy violations by employees - particularly privileged users like system administrators. When an employee is forced away from their duties, a…

Security program management and oversight

Question

Options

AFraud committed by a system administrator
BPoor password security among users
CThe need for additional security staff
DSoftware vulnerabilities in vendor code

How the community answered

(61 responses)

A
90% (55)
B
2% (1)
C
5% (3)
D
3% (2)

Explanation

Mandatory vacations (also called mandatory leave) are a detective control specifically designed to uncover fraud, embezzlement, or policy violations by employees - particularly privileged users like system administrators. When an employee is forced away from their duties, a substitute must cover their tasks, which can reveal fraudulent schemes that depend on the original employee's constant presence to hide. This control does not address password security (B), staffing levels (C), or software vulnerabilities (D), which require different controls and assessments.

Topics

#mandatory vacations#fraud detection#insider threat#privileged access

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice