Which of the following should be performed by an operator?

A.
Changing profiles

B.
Approving changes

C.
Adding and removal of users

D.
Installing system software

Explanation:
Of the listed tasks, installing system software is the only task that should normally be performed by an operator
in a properly segregated environment.
Incorrect Answers:
A: Changing profiles should not be performed by an operator; this should be performed by a security
administrator.
B: Approving changes should not be performed by an operator; this should be performed by a change control
analyst or panel.
C: Adding and removal of users should not be performed by an operator; this should be performed by a security
administrator.