A Security Administrator Is Updating Corporate Policies to Respond to an Incident

Multiple Choice

A security administrator is updating corporate policies to respond to an incident involving collusion between two systems administrators that went undetected for more than six months. Which of the following policies would have MOST likely uncovered the collusion sooner? (Choose two.)

A) Mandatory vacation
B) Separation of duties
C) Continuous monitoring
D) Incident response
E) Time-of-day restrictions
F) Job rotation