Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Surely observation of the settings/configuration is better.
If the question is about best evidence, then direct verification on the system in option D. is better than just logging a change in a ticket (C.) . In terms of database systems, password configurations are typically a database administration task while password configurations with end-user access - even if it is read-only - are more typical in the PC/desktop area. Interviews with management (B.) are certainly not the best evidence, as their information again only reflects what they are told by their employees. Therefore, my bet is on D. Observation of updated password with database administrators.
Answer: C