QuestionQ1

Security Test Techniques

Which of the following is an example of reconciliation testing?

  • A Reviewing and re-approving employee access to sensitive systems, confirming that users still require the access based on their current job responsibilities
  • B Verifying that access rights of all active user accounts in the company’s HR system match the records in the identity management database
  • C Verifying that access to privileged accounts is reviewed annually to ensure that only authorized personnel retain such access
  • D Checking regularly that user accounts with access to customer data still need this access, ensuring that unneeded privileges are removed
Explanation

Reconciliation testing compares data held in separate systems to confirm that corresponding records agree and to identify discrepancies. Verifying that HR-system access rights match the identity-management database is a reconciliation control.

Community Discussion

No comments yet. Be the first to start the discussion!