ITPEC IP October 2023 Question 65
Several functions are implemented for internal control by the system. Which of the following is the appropriate function that the process below implements?
The login screen is displayed. A user enters the user ID and the password. If the combination of the user ID and the password matches the already-registered combination, the screen transits to the business menu screen. If not, the screen does not transit, and an error message is displayed.
Explanation
Access control by the system — checking the user ID and password before opening the business menu lets only registered users in.
The process identifies the user (user ID), authenticates the user (password matching the registered pair), and lets through only a user who passes; anyone else stays on the login screen with an error. Preventing unauthorized people from using the system in this way is access control, one of the IT controls that support internal control.
Answer (b)
Why not others:
- •(a) — detecting a system failure means monitoring the system's own operation; a login check says nothing about failures
- •(c) — access rights are granted beforehand, when the user ID and password are registered; the login only checks against what was granted
- •(d) — confirming that a password setting is valid means checking its length, character types or expiry when it is set, not comparing an entered password with the registered one
Key rule: Registering users and granting rights comes first; the login check that enforces them at every use is access control.
System Audit · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.