Which of the following controls might force a person in operations into collusion with personnel assigned organizationally within a different function for the sole purpose of gaining access to data he is not authorized to access?
A.
Limiting the local access of operations personnel
B.
Enforcing auditing
C.
Enforcing job rotation
D.
Limiting control of management personnel
Explanation:
A: If operations personnel are limited in what they can access, they would need to collude with someone who actually has access to the resource. This question is not very clear, but it is very close to the way many CISSP exam questions are formatted.
Why is not “Enforcing job rotation”
0
0
Yikes. I like “job rotation”, too, but I suspect it is not correct. Job rotation generally would be folk from within the same department rotating through each job. Since they are attempting to force an Operations person to collude with someone outside of Operations, job rotation wouldn’t really provide that.
0
0
Yes, I also support ‘Job Rotation’ option
0
0
Forcing a person to ‘collude’ is the key here.
Job rotation is not correct.
0
0
I agree with the “Enforcing job rotation”
0
0