Certified Information Systems Auditor (CISA) — Question 950

A proper audit trail of changes to server start-up procedures would include evidence of:

Answer options

• A. program execution.
• B. operator overrides.
• C. subsystem structure.
• D. security control options.

Correct answer: B

Explanation

The correct answer is B, as operator overrides directly indicate manual changes made to the start-up procedures, which are critical for auditing. The other options, while relevant to server operations, do not specifically demonstrate modifications made by operators during the start-up process.