Which of the following is NOT true concerning Application Control?
A.
It limits end users use of applications in such a way that only particular screens are visible.
B.
Only specific records can be requested through the application controls
C.
Particular usage of the application can be recorded for audit purposes
D.
It is non-transparent to the endpoint applications so changes are needed to the applications and databases
involved
Explanation:
Application control limits what users can see or do within the application. For example, if a user does not have
the necessary access privilege to perform some functions, the functions can be hidden from the screen or the
screen itself can be hidden so the user cannot select it within the application. In a similar way, only the records
a user has access to can be displayed.
Application control is transparent to the user; the user does not know that a particular screen, function or data
records have been hidden.
Application control can be implemented to record the activities a user performs within the application for
auditing purposes.
Incorrect Answers:
A: It is true that application control limits end users use of applications in such a way that only particular screens
are visible.
B: It is true that only specific records can be requested through the application controls.
C: It is true that particular usage of the application can be recorded for audit purposes by Application Control.Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 1084-1085