A supervisor in the human resources department has been given additional job duties in the accounting
department. Part of their new duties will be to check the daily balance sheet calculations on spreadsheets
that are restricted to the accounting group. In which of the following ways should the account be
handled?
A.
The supervisor should be allowed to have access to the spreadsheet files, and their membership in the
human resources group should be terminated.
B.
The supervisor should be removed from the human resources group and added to the accounting
group.
C.
The supervisor should be added to the accounting group while maintaining their membership in the
human resources group.
D.
The supervisor should only maintain membership in the human resources group.
Explanation:
You can assign permissions to access resources either to a user or a group. The most efficient way is to
assign permissions to a group (group based privileges). By assigning the human resources supervisor’s
user account to the group means the supervisor will inherit the permissions of that group, and allow him
to carry out the new duties. Because the new duties are being added to his normal duties, maintaining
membership in the human resources group will allow the supervisor to continue performing his normal
duties.
Incorrect Answers:
A: Because the new duties are being added to his normal duties, terminating the supervisor’s
membership in the human resources group will prevent the supervisor from carrying out his normal
duties as he will no longer have the required permissions.
B: Because the new duties are being added to his normal duties, removing the supervisor from the human
resources group will prevent the supervisor from carrying out his normal duties as he will no longer have
the required permissions.
D: Maintaining the supervisor’s membership in the human resources group only, will prevent the
supervisor from carrying out his additional duties in the accounting department as the supervisor will not
have the required permissions.
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p. 294