An IS auditor examining the configuration of an operating system to verify the controls should review the:

A.
transaction logs.

B.
authorization tables.

C.
parameter settings.

D.
routing tables.

Explanation:
Parameters allow a standard piece of software to be customized for diverse environments and are important in
determining how a system runs. The parameter settings should be appropriate to an organization’s workload
and control environment, improper implementation and/or monitoring of operating systems can result in
undetected errors and corruption of the data being processed, as well as lead to unauthorized access and
inaccurate logging of system usage. Transaction logs are used to analyze transactions in master and/or
transaction files. Authorization tables are used to verify implementation of logical access controls and will not be
of much help when reviewing control features of an operating system. Routing tables do not contain information
about the operating system and, therefore, provide no information to aid in the evaluation of controls.