Скачать или смотреть Poll No.20| Active Directory Control Weakness Explained | ISA 3.0 Quick Revision | CrackMyExams

IS Audit Poll Question #20 – Access Control & Segregation of Duties

Hi everyone 👋 Welcome back to Crack My Exams! we decode a frequently tested IS Audit concept — Access Control and Segregation of Duties (SoD).

💡 Question Recap:
A financial institution enforces AD-based user creation but allows HR departments to terminate accounts directly.
What’s the control weakness?

We’ll break down what Active Directory (AD) means, why this setup is risky, and how it violates Segregation of Duties — one of the most critical internal control principles for IT audits.

✅ Correct Answer:
B) Lack of segregation of duties in user termination

📘 Watch this video to understand:

What is Active Directory (AD)?

How centralized authentication works

Why HR should not terminate user accounts directly

The right way to manage user creation and termination controls

📲 Subscribe for more quick IS Audit & ISA 3.0 MCQs, revision tips, and practical exam insights!
📩 Contact:
Instagram: disa_crackmyexams

WhatsApp: +91-93612 00351

#ISA30 #ISAudit #CrackMyExams #SegregationOfDuties #AccessControl #ICAIMCQ #ISACAudit #InformationSystemsAudit