Systems Security Certified Practitioner (SSCP) — Question 96

Which of the following exemplifies proper separation of duties?

Answer options

• A. Operators are not permitted modify the system time.
• B. Programmers are permitted to use the system console.
• C. Console operators are permitted to mount tapes and disks.
• D. Tape operators are permitted to use the system console.

Correct answer: A

Explanation

The correct answer, A, indicates that operators do not have the authority to change the system time, which is a critical function that should be restricted to prevent unauthorized modifications. Options B, C, and D all allow personnel to perform tasks that could lead to conflicts of interest and potential security risks, violating the principle of separation of duties.