During a Third-Party Audit, It Is Determined That a Member

question 1049

Multiple Choice

During a third-party audit, it is determined that a member of the firewall team can request, approve, and implement a new rule-set on the firewall. Which of the following will the audit team most l likely recommend during the audit out brief?

• A) Discretionary access control for the firewall team
• B) Separation of duties policy for the firewall team
• C) Least privilege for the firewall team
• D) Mandatory access control for the firewall team

---

Definitions:

Oral Evidence

Testimony or statements spoken out loud in court as opposed to written evidence.

Statute of Frauds

A legal principle requiring certain types of contracts to be in writing to be enforceable.

United States Code

The comprehensive, codified collection of the permanent general and special laws of the United States federal government.

Suretyship Provision

A legal agreement in which a third party agrees to be responsible for the debt or obligation of another party if that party fails to perform or pay.