An Organization Wants to Separate Permissions for Individuals Who Perform

question 1052

Multiple Choice

An organization wants to separate permissions for individuals who perform system changes from individuals who perform auditing of those system changes. Which of the following access control approaches is BEST suited for this?

• A) Assign administrators and auditors to different groups and restrict permissions on system log files to read-only for the auditor group.
• B) Assign administrators and auditors to the same group, but ensure they have different permissions based on the function they perform.
• C) Create two groups and ensure each group has representation from both the auditors and the administrators so they can verify any changes that were made.
• D) Assign file and folder permissions on an individual user basis and avoid group assignment altogether.

---

Definitions:

Strategic Management

The continuous planning, observing, analyzing, and evaluating of everything required for a company to achieve its aims and objectives.

Leadership Responsibility

The duty of leaders to guide, support, and drive their teams or organizations towards achieving shared goals.

Company CEO

The Chief Executive Officer, the highest-ranking individual in a company or organization, responsible for making major corporate decisions.

Board Members

Individuals elected or appointed to serve on the governing body of an organization, responsible for overseeing its management and operations.