CISSP – Information Systems Security Management Professional (ISSMP) — Question 45

Which of the following can be prevented by an organization using job rotation and separation of duties policies?

Answer options

• A. Collusion
• B. Eavesdropping
• C. Buffer overflow
• D. Phishing

Correct answer: A

Explanation

The correct answer is A, as job rotation and separation of duties help prevent collusion by ensuring that no single individual has complete control over a critical process. Options B, C, and D do not relate to internal control mechanisms; eavesdropping is about interception, buffer overflow involves programming errors, and phishing is a social engineering attack.