ITPEC FE Morning April 2019 Question 59
ITPEC FE Morning April 2019 — Question 59 of 80
System Auditor Role — An auditor verifies and confirms existing controls, not creates or implements them
Correct answer: a) Confirmation of the management status of the access control concerning the data.
A system auditor reviews and validates whether access controls are functioning properly. The auditor's role is to confirm, verify, and assess — not to create policies, build management tables, or implement operational controls.
Why not the others:
- b) "Creation and storage" of a management table is an administrative task, not an audit activity
- c) "Establishment of a management policy" is a management/governance responsibility
- d) "Implementation of operations management" is an operational task performed by IT staff
Key rule: Auditors examine and confirm — look for keywords like confirmation, verification, review, assessment. Keywords like creation, establishment, implementation indicate operational or managerial roles, not auditing.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.