CompTIA CASP+ (CAS-003) — Question 329

A security manager wants to implement a policy that will provide management with the ability to monitor employee's activities with minimum impact to productivity.
Which of the following policies is BEST suited for this scenario?

Answer options

• A. Separation of duties
• B. Mandatory vacations
• C. Least privilege
• D. Incident response

Correct answer: A

Explanation

The correct answer, A. Separation of duties, ensures that no single employee has control over all aspects of a process, allowing for monitoring without significantly affecting productivity. B. Mandatory vacations and C. Least privilege do not directly address monitoring activities, and D. Incident response focuses on handling security breaches rather than ongoing monitoring.