Detecting Fraud via Job Rotation

Answer Correct answer: D — Job rotation assigns employees to different roles, allowing them to discover fraud committed by their predecessors during the transition.

Which of the following is best used to detect fraud by assigning employees to different roles?

  1. Least privilege
  2. Mandatory vacation
  3. Separation of duties
  4. Job rotation Correct Answer

Community Votes

D
82%
C
18%

82% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

Tests the distinction between preventive controls (separation of duties) and detective controls (job rotation). The trap is choosing separation of duties, which prevents but does not detect.

Job rotation is the best control for detecting fraud because it allows new employees to identify irregularities left by predecessors. This page explains why job rotation is preferred over separation of duties for detection purposes.

Separation of duties (C) is frequently chosen because it is a strong anti-fraud control, but it is primarily preventive rather than detective.

Community Discussion (20 comments)

johnabayot 👍 26 Selected: D
Job rotation will DETECT Seperation of duties will PREVENT
1403ad2 👍 14 Selected: D
choose d 2024-20-2 On Test and passed with 802
toony12345 👍 2 Selected: B
the answer is 100% B. Mandatory vacations: This policy requires employees to take vacations, which can help detect fraudulent activities and ensure that no one person is indispensable.
HaraTadahisa 👍 1 Selected: D
D is correct answer.
RamnathKM 👍 2 Selected: B
Another useful policy is to always require vacations. This means that people would need to leave their job and go on vacation for a certain amount of time. And usually when someone is on vacation, someone else is brought in to cover that person’s responsibilities. This is an opportunity for that person to make sure that everything is performing as expected, and it would limit the ability of any one person to commit a type of fraud. This is not a commonly seen business policy, but it’s one that you might run into if you work in a very high secure environment. https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/personnel-security/
BD69 👍 1 Selected: C
Separation of Duties (SoD): This practice involves dividing critical tasks among different employees to prevent any single individual from having complete control over a process. SoD is generally considered a more effective way to detect and prevent fraud compared to other methods. By assigning different roles to employees, it becomes harder for any one person to manipulate or conceal fraudulent activities.
greendophin 👍 1 Selected: D
choose D.
TM78 👍 6 Selected: D
D. Job Rotation This is from the Mike Myers’s Sec+ (601) Cert Guide book: “Job rotation involves periodically switching people around to work in different positions. This practice enables different people to become proficient in a variety of job roles so that the organization doesn’t have to depend solely on one person to perform certain critical function or tasks”…(HERE’S THE IMPORTANT PART)…”When people become too comfortable with a job, they might believe that they can get away with performing actions they are not authorized to perform. Rotating people into different positions increases the potential to detect fraud or misuse in that position and can discourage or prevent nefarious activities.”
anil7 👍 2
job rotation can both detect and prevent fraud, while separation of duties primarily serves as a preventive measure. Both practices are important components of an effective internal control system aimed at mitigating the risk of fraud within an organization.
ArunRavilla 👍 2
Two-person control, least privilege, and separation of duties are all designed to deter and prevent fraud from occurring in the first place. None of which would meet Wanda's objective. Of the controls listed, only job rotation serves to detect fraud that has already taken place. So, this is the correct answer.
Jared77 👍 1 Selected: D
My bad. the answer is D "job rotation" . Detective : deployed to discover unwanted or unauthorized activity. Often are after-the-fact controls rather than real-time controls. For example : job rotation, mandatory vacations.... etc..
ganymede 👍 4 Selected: D
D. Job rotation Separation of duties - PREVENTS fraud Job rotation - DETECTS fraud
Jared77 👍 1 Selected: C
By Chat GPT, "Separation of Duties (SoD) is generally considered a more effective way to detect and prevent fraud compared to job rotation."
kevgjo 👍 2 Selected: C
Separation of duties
Baba111222 👍 2 Selected: D
The question aske for "detecting" fraud, not "preventing". SoD prevents, while Job Rotation detects.
cantbeme 👍 5 Selected: C
passed exam today on 19.01.2024.... This question is on the exam but worded differently at the end. Mentions something about workers not being in the same location or something like that. The way it was written on the exam made answer C stand apart as the obvious answer.
Hs1208 👍 2 Selected: C
Separation of duties is a security principle that involves distributing tasks and responsibilities among multiple individuals or systems to prevent any single entity from having complete control over a process.
maggie22 👍 1 Selected: D
discover employees secret.
[Removed] 👍 2 Selected: C
Separation of duties (SoD), also known as segregation of duties, is the concept of having more than one person required to complete a task. It is an administrative control used by organisations to prevent fraud, sabotage, theft, misuse of information, and other security compromises.
LuckyAro 👍 4 Selected: D
Job rotation allows for employees to rotate duties and likely to discover fraud by previous employee if any.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Job rotation involves periodically moving employees between different roles or responsibilities. When an employee rotates into a new position, they review the work of their predecessor. This fresh perspective makes it highly likely that fraudulent activities, errors, or anomalies committed by the previous holder of the role will be discovered. Therefore, it serves as a detective control.

Why the Other Options Are Wrong

Least privilege (A) limits access rights to reduce risk but does not actively detect fraud. Mandatory vacation (B) can help detect fraud by forcing an employee to step away so others handle their tasks, but job rotation is more directly described as 'assigning employees to different roles' to uncover issues. Separation of duties (C) splits critical tasks among multiple people to prevent fraud from occurring in the first place, making it a preventive control rather than a detective one.

Community Comment Notes

Many users emphasize the classic security exam distinction: "Job rotation detects, separation of duties prevents." As johnabayot noted, this is a key concept. Some users argue for mandatory vacation, but job rotation is often cited in official study guides like Mike Myers's as the primary method for detection through role assignment.

Official Reference

Exam Strategy

When a question asks about 'detecting' fraud or errors, look for controls that involve review or change of personnel, such as job rotation or mandatory vacation. If it asks about 'preventing' fraud, look for segregation of duties or least privilege.

Frequently Asked Questions

Why isn't separation of duties the answer?

Separation of duties is a preventive control designed to stop fraud before it happens by splitting tasks. It does not actively detect existing fraud.

How does job rotation detect fraud?

By taking over a role, a new employee reviews the previous worker's actions and records, often spotting irregularities or unauthorized transactions that were hidden.

Related Analysis

← Back to SY0-601 Study Guide