CompTIA CASP+ Practice Test

Which activity could reduce the security benefits of mandatory vacations?

1. Have a replacement employee run several daily scripts

2. Require staff to complete exit interviews

3. Rotate job responsibilities among employees

4. Implement regular auditing of access logs

The correct answer is: Have a replacement employee run several daily scripts

Having a replacement employee run several daily scripts could reduce the security benefits of mandatory vacations because the presence of a substitute employee does not inherently disrupt the status quo of the previous employee's activities. Mandatory vacations are designed to uncover fraudulent or malicious behavior by forcing employees to take time off, thereby allowing for a temporary reassessment of their work. If a replacement employee continues to run the same scripts and performs similar tasks without intervening in or reviewing the processes set in place by the absent employee, any potential suspicious activities or anomalies may go undetected. This could allow the original employee to conceal wrongdoing or maintain control over their processes without the required oversight intended by the vacation policy. In contrast, rotating job responsibilities among employees, requiring exit interviews, and implementing regular auditing of access logs enhance security. These practices ensure that different personnel handle various tasks, which can create a checks-and-balances system that aids in identifying unusual patterns of behavior and potential misconduct. Exit interviews can help capture any lingering concerns about an employee's actions, while auditing access logs allows for an examination of access patterns that could highlight potential security issues.