Certified Information Systems Auditor (CISA) — Question 513

What is the MOST difficult aspect of access control in a multiplatform, multiple-site client/server environment?

Answer options

• A. Restricting a local user to necessary resources on a local platform
• B. Creating new user IDs valid only on a few hosts
• C. Maintaining consistency throughout all platforms
• D. Restricting a local user to necessary resources on the host server

Correct answer: C

Explanation

The correct answer is C because maintaining consistency across various platforms is challenging due to differing security policies and configurations. Options A and D focus on local resource restrictions, which are typically easier to manage, while B deals with user IDs on specific hosts, which is a less overarching concern compared to overall consistency.