A payroll clerk with authorised access to the local area network (LAN) was able to update personnel files directly, independent of the application programmes.

A payroll clerk with authorised access to the local area network (LAN) was able to update personnel files directly, independent of the application programmes.

The best control to prevent a clerk from doing this would be to
A . Restrict access to LAN workstations by such means as automatic lock-up after a predefined period of keyboard inactivity.
B . Restrict access to and monitor installation of software products or tools having powerful update capabilities.
C . Use password security to authenticate users as they attempt to log on to the LA
E . Establish a security policy for the department that prohibits direct updating of data files.

View Answer

Answer: B