See chapter 10 separation of duties is used to ensure

See Chapter 10. Separation of duties is used to ensure that no single
individual has too much privilege, which could lead to a security
incident or fraud.
157 Which of the following tasks would NOT be performed by a security
administrator?
A. Changing file permissions
B. Configuring user privileges
C. Installing system software
D. Reviewing audit data
Answer: C
See Chapter 10. Installing system software is a system
administrator's function; the rest are a security administrator's
functions.
158 What's the potential security benefit of rotation of duties?

See Chapter 10. Rotation of duties is used to keep mixing up the
teams in order to prevent situations in which individuals are tempted
to perform unauthorized acts.
159 The process of reviewing and approving changes in production
systems is known as
See Chapter 10. Change management is the complete management
function that controls changes made to a production environment.
160 The process of maintaining and documenting software versions and
settings is known as
See Chapter 10. Configuration management is the support function
that’s used to store version information about its systems.
161 Configuration management is used to
A. Document the approval process for configuration
changes.
B. Control the approval process for configuration
changes.
C. Ensure that changes made to an information system
don’t compromise its security.
D. Preserve a complete history of the changes to software
or data in a system.
Answer: D

See Chapter 10. Configuration management is used to preserve all
prior settings or versions of software or hardware, as well as to
provide a check-out/check-in capability to avoid collisions @@md
where two or more developers would be working on the same
section of code at the same time, which would result in one
developer’s changes overwriting the other’s.
162 The traces of original data remaining after media erasure are known
as