The Chief Financial Officer (CFO) of an organization wants the IT department to add the CFO's account to the domain administrator group. The IT department thinks this is risky and wants support from the security manager before proceeding. Which of the following BEST supports the argument against providing the CFO with domain administrator access?
A) Discretionary access control
B) Separation of duties
C) Data classification
D) Mandatory access control

Question

Quizplus · Accepted Answer

Separation of duties is a security principle that prevents conflict of interest by dividing tasks and privileges among multiple people, reducing the risk of fraud or error. Giving the CFO domain administrator access violates this principle.

The Chief Financial Officer (CFO) of an Organization Wants the IT