Discuss ISC2 SSCP Exam Topic 7 Question 1

Which of the following exemplifies proper separation of duties?

AOperators are not permitted modify the system time.

BProgrammers are permitted to use the system console.

CConsole operators are permitted to mount tapes and disks.

DTape operators are permitted to use the system console.

Suggested Answer: A

This is an example of Separation of Duties because operators are prevented from modifying the system time which could lead to fraud. Tasks of this nature should be performed by they system administrators.

AIO defines Separation of Duties as a security principle that splits up a critical task among two or more individuals to ensure that one person cannot complete a risky task by himself.

The following answers are incorrect:

Programmers are permitted to use the system console. Is incorrect because programmers should not be permitted to use the system console, this task should be performed by operators. Allowing programmers access to the system console could allow fraud to occur so this is not an example of Separation of Duties..

Console operators are permitted to mount tapes and disks. Is incorrect because operators should be able to mount tapes and disks so this is not an example of Separation of Duties.

Tape operators are permitted to use the system console. Is incorrect because operators should be able to use the system console so this is not an example of Separation of Duties.

References:

OIG CBK Access Control (page 98 - 101)

AIOv3 Access Control (page 182)

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Lashandra 11 months ago

I thought all operators should have some console access?

Ernest 12 months ago

Wait, are we really allowing tape operators at the console?

Daren 12 months ago

C and D are a big no for separation of duties.

Janey 12 months ago

I disagree, B seems fine too.

Janna 1 year ago

A is definitely the right choice.

Eileen 1 year ago

I vaguely recall that tape operators should have limited access, so option D seems like a bad example of separation of duties too.

Launa 1 year ago

I feel like option C is definitely wrong since allowing console operators to mount tapes and disks could lead to security issues.

Lashunda 1 year ago

I'm not entirely sure, but I remember something about console access being a risk. Maybe option B is not a good example of separation of duties?

Layla 1 year ago

I think option A makes sense because not modifying the system time helps prevent unauthorized changes.

Fausto 1 year ago

I'm a little confused by the wording of the question. It mentions path selection and path quality, but none of the options seem to directly address that. I'll have to re-read the question and options a few times to make sure I understand what they're asking for.

Rocco 1 year ago

I think the product life cycle might be significant too, but can it really beat profit maximization in importance?

Emilio 1 year ago

I feel confident about this one. The employee being given an unfair appraisal would be a valid grievance, as it's not a disciplinary issue.

Thad 1 year ago

I remember practice questions where brute force attacks were mentioned. RDP and SSH both sound like they could target the OS as well.

Nikita 1 year ago

I suppose it could be tricky, but isn't staff resistance just a change management issue? I wonder if that's less about suitability and more about execution.

ISC2 SSCP Exam - Topic 7 Question 1 Discussion