ERP ERP Security, Access Control & Role-Based Permissions

Question 1

What is the primary purpose of Role-Based Access Control (RBAC) in an ERP system?

Accepted Answer

To assign system permissions based on a user's job function

Answer

To track user login times and session durations

Answer

To encrypt sensitive financial data stored in the database

Answer

To monitor network traffic between ERP modules

Question 2

In ERP security, what does 'Segregation of Duties' (SoD) primarily prevent?

Accepted Answer

Fraud and errors by ensuring no single user controls an entire critical process

Answer

Unauthorized software version updates

Answer

System downtime during peak business usage

Answer

Data duplication across integrated ERP modules

Question 3

What does the 'principle of least privilege' mean in ERP security?

Accepted Answer

Users should have the minimum access needed to perform their job duties

Answer

Administrative accounts should be used as rarely as possible

Answer

Passwords must meet minimum complexity requirements set by policy

Answer

Only senior managers can approve configuration changes

Question 4

What is a 'super user' in an ERP security context?

Accepted Answer

An account with unrestricted access to all system functions and data

Answer

A user with the highest sales performance in the organization

Answer

A read-only account used for system monitoring and reporting

Answer

An account used to train other employees on system functions

Question 5

Which control best prevents a single user from both creating a vendor record and processing payment to that vendor?

Accepted Answer

Segregation of Duties (SoD) controls

Answer

Password complexity requirements and expiration policies

Answer

Data encryption for all payment transactions

Answer

Session timeout policies for inactive users

Question 6

In an ERP system, what is an 'authorization object'?

Accepted Answer

A data structure defining what actions users can perform on specific data

Answer

A physical security device protecting the server room

Answer

A signed document granting system access to new employees

Answer

A log entry recording each user access attempt

Question 7

Which user account type should be used for day-to-day business operations in an ERP system?

Accepted Answer

Standard user account with role-appropriate permissions

Answer

Super user account with broad administrative privileges

Answer

Service account used for system-to-system integration

Answer

Administrative account reserved for configuration management