Which term BEST describes a practice used to detect fraud for users or a user by forcing them to be away from
the workplace for a while?

A.
Mandatory Vacations

B.
Least Privilege Principle

C.
Obligatory Separation

D.
Job Rotation

Explanation:
Employees in sensitive areas should be forced to take their vacations, which is known as a mandatory vacation.
While they are on vacation, other individuals fill their positions and thus can usually detect any fraudulent errors
or activities. Two of the many ways to detect fraud or inappropriate activities would be the discovery of activity
on someone’s user account while they’re supposed to be away on vacation, or if a specific problem stopped
while someone was away and not active on the network. These anomalies are worthy of investigation.
Employees who carry out fraudulent activities commonly do not take vacations because they do not want
anyone to figure out what they are doing behind the scenes. This is why they must be forced to be away from
the organization for a period of time, usually two weeks.
Incorrect Answers:
B: Least privilege means an individual should have just enough permissions and rights to fulfill his role in the
company and no more. This is not what is described in the question.
C: Obligatory Separation is not a term for the process used to detect fraud for users or a user by forcing them
to be away from the workplace for a while.
D: Job rotation in the workplace is a system where employees work at several jobs in a business, performing
each job for a relatively short period of time. This could be used to detect fraud for users or a user by forcing
them to be away from the workplace for a while. However, this question is asking for the BEST answer and
Mandatory Vacations are for this specific purpose.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 127, 1235-1236