Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Access right may be in paper. Actual configuration will ensure the real setting
To determine whether programmers have permission to alter data in the production environment, the most direct and effective method is to review the actual access rights granted to their accounts. This reveals: Who has access What level of access they have (e.g., read, write, modify) Whether access is appropriate or violates segregation of duties (SoD) Why not the others? A. The access control system's configuration This tells how access is managed in general, but not who currently has what access. B. How the latest system changes were implemented This may provide insight into past behavior, but it's not a comprehensive or ongoing view of access rights. D. The access control system's log settings Log settings tell you what is being recorded, not who currently has access.
we can find the exact user right in access control list.