SY0-301 Question #381: Real Exam Question with Answer & Explanation

The correct answer is B: Job rotation. Job rotation involves periodically reassigning employees to different roles to reduce fraud risk and build cross-functional knowledge.

Question

A software developer is responsible for writing the code on an accounting application. Another software developer is responsible for developing code on a system in human resources. Once a year they have to switch roles for several weeks. Which of the following practices is being implemented?

Options

AMandatory vacations
BJob rotation
CLeast privilege
DSeparation of duties

Explanation

Job rotation involves periodically reassigning employees to different roles to reduce fraud risk and build cross-functional knowledge.

Common mistakes.

A. Mandatory vacations require employees to take scheduled time off so that others can review their work for fraud, which is a different control from periodically reassigning role responsibilities.
C. Least privilege restricts a user's access rights to only what is required for their current job function, not a policy of switching roles between employees.
D. Separation of duties divides a single critical task among multiple people so no one individual can complete a sensitive transaction alone, which is structurally different from rotating entire job roles.

Concept tested. Job rotation as a personnel security control

Reference. https://csrc.nist.gov/glossary/term/job_rotation

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice