Bird
0
0

Given a system implementing Separation of Duties, which of the following scenarios best illustrates this pattern?

medium🚀 Application Q4 of 15
Cybersecurity - Security Architecture and Design
Given a system implementing Separation of Duties, which of the following scenarios best illustrates this pattern?
AA single employee approves and processes a financial transaction
BEmployees share passwords to access the system
CAll employees have full access to the financial system
DOne employee requests a purchase, another approves it, and a third processes payment
Step-by-Step Solution
Solution:

  1. Step 1: Understand Separation of Duties

    This pattern divides responsibilities among different people to reduce fraud and errors.

  2. Step 2: Analyze each option

    One employee requests a purchase, another approves it, and a third processes payment shows different employees handling request, approval, and payment, matching the pattern. A single employee approves and processes a financial transaction has one person doing all tasks, which is insecure. Options C and D violate access control principles.

  3. Final Answer:

    One employee requests a purchase, another approves it, and a third processes payment -> Option D

  4. Quick Check:

    Separation of Duties = Different people for different tasks [OK]
Quick Trick: Separation of Duties splits tasks among people [OK]
Common Mistakes:
MISTAKES
  • Assuming one person can do all steps safely
  • Ignoring access control principles

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes
Advanced Threat Protection - Threat hunting techniques - Quiz 4medium Advanced Threat Protection - Malware analysis basics - Quiz 3easy Compliance and Governance - GDPR requirements - Quiz 6medium Compliance and Governance - PCI DSS for payment data - Quiz 6medium Digital Forensics - Network forensics - Quiz 5medium Emerging Security Topics - AI in cybersecurity (defense and offense) - Quiz 15hard Emerging Security Topics - IoT security challenges - Quiz 11easy Incident Response - Incident response lifecycle - Quiz 4medium Incident Response - Communication during incidents - Quiz 8hard Security Architecture and Design - Microservices security architecture - Quiz 10hard