Which of the following should be performed by an operator?
A.
Changing profiles
B.
Approving changes
C.
Adding and removal of users
D.
Installing system software
Explanation:
Of the listed tasks, installing system software is the only task that should normally be performed by an operator
in a properly segregated environment.
Incorrect Answers:
A: Changing profiles should not be performed by an operator; this should be performed by a security
administrator.
B: Approving changes should not be performed by an operator; this should be performed by a change control
analyst or panel.
C: Adding and removal of users should not be performed by an operator; this should be performed by a security
administrator.