Detecting Fraud via Job Rotation

SY0-601 By islever Editorial Last updated

Short answer

D Job rotation assigns employees to different roles, allowing them to discover fraud committed by their predecessors during the transition.

Question

Which of the following is best used to detect fraud by assigning employees to different roles?
  1. Least privilege
  2. Mandatory vacation
  3. Separation of duties
  4. Job rotation Correct Answer

Key Takeaways

Tests the distinction between preventive controls (separation of duties) and detective controls (job rotation). The trap is choosing separation of duties, which prevents but does not detect.

Job rotation is the best control for detecting fraud because it allows new employees to identify irregularities left by predecessors. This page explains why job rotation is preferred over separation of duties for detection purposes.

Common mistake: Separation of duties (C) is frequently chosen because it is a strong anti-fraud control, but it is primarily preventive rather than detective.

Expert Analysis

Why the Answer Is Correct

Job rotation involves periodically moving employees between different roles or responsibilities. When an employee rotates into a new position, they review the work of their predecessor. This fresh perspective makes it highly likely that fraudulent activities, errors, or anomalies committed by the previous holder of the role will be discovered. Therefore, it serves as a detective control.

Why the Other Options Are Wrong

Least privilege (A) limits access rights to reduce risk but does not actively detect fraud. Mandatory vacation (B) can help detect fraud by forcing an employee to step away so others handle their tasks, but job rotation is more directly described as 'assigning employees to different roles' to uncover issues. Separation of duties (C) splits critical tasks among multiple people to prevent fraud from occurring in the first place, making it a preventive control rather than a detective one.

Community Comment Notes

Many users emphasize the classic security exam distinction: "Job rotation detects, separation of duties prevents." As johnabayot noted, this is a key concept. Some users argue for mandatory vacation, but job rotation is often cited in official study guides like Mike Myers's as the primary method for detection through role assignment.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When a question asks about 'detecting' fraud or errors, look for controls that involve review or change of personnel, such as job rotation or mandatory vacation. If it asks about 'preventing' fraud, look for segregation of duties or least privilege.

Frequently Asked Questions

Why isn't separation of duties the answer?

Separation of duties is a preventive control designed to stop fraud before it happens by splitting tasks. It does not actively detect existing fraud.

How does job rotation detect fraud?

By taking over a role, a new employee reviews the previous worker's actions and records, often spotting irregularities or unauthorized transactions that were hidden.

More SY0-601 FAQ →

Community Votes

D
82%
C
18%

82% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 20 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 20

  1. johnabayot 👍 26 Answered D
    Job rotation will DETECT Seperation of duties will PREVENT
  2. 1403ad2 👍 14 Answered D
    choose d 2024-20-2 On Test and passed with 802
  3. TM78 👍 6 Answered D
    D. Job Rotation This is from the Mike Myers’s Sec+ (601) Cert Guide book: “Job rotation involves periodically switching people around to work in different positions. This practice enables different people to become proficient in a variety of job roles so that the organization doesn’t have to depend solely on one person to perform certain critical function or tasks”…(HERE’S THE IMPORTANT PART)…”When people become too comfortable with a job, they might believe that they can get away with performing actions they are not authorized to perform. Rotating people into different positions increases the potential to detect fraud or misuse in that position and can discourage or prevent nefarious activities.”
  4. cantbeme 👍 5 Answered C
    passed exam today on 19.01.2024.... This question is on the exam but worded differently at the end. Mentions something about workers not being in the same location or something like that. The way it was written on the exam made answer C stand apart as the obvious answer.
  5. LuckyAro 👍 4 Answered D
    Job rotation allows for employees to rotate duties and likely to discover fraud by previous employee if any.
Show 15 more comments
  1. ganymede 👍 4 Answered D
    D. Job rotation Separation of duties - PREVENTS fraud Job rotation - DETECTS fraud
  2. RamnathKM 👍 2 Answered B
    Another useful policy is to always require vacations. This means that people would need to leave their job and go on vacation for a certain amount of time. And usually when someone is on vacation, someone else is brought in to cover that person’s responsibilities. This is an opportunity for that person to make sure that everything is performing as expected, and it would limit the ability of any one person to commit a type of fraud. This is not a commonly seen business policy, but it’s one that you might run into if you work in a very high secure environment. https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/personnel-security/
  3. ArunRavilla 👍 2
    Two-person control, least privilege, and separation of duties are all designed to deter and prevent fraud from occurring in the first place. None of which would meet Wanda's objective. Of the controls listed, only job rotation serves to detect fraud that has already taken place. So, this is the correct answer.
  4. [Removed] 👍 2 Answered C
    Separation of duties (SoD), also known as segregation of duties, is the concept of having more than one person required to complete a task. It is an administrative control used by organisations to prevent fraud, sabotage, theft, misuse of information, and other security compromises.
  5. anil7 👍 2
    job rotation can both detect and prevent fraud, while separation of duties primarily serves as a preventive measure. Both practices are important components of an effective internal control system aimed at mitigating the risk of fraud within an organization.
  6. Hs1208 👍 2 Answered C
    Separation of duties is a security principle that involves distributing tasks and responsibilities among multiple individuals or systems to prevent any single entity from having complete control over a process.
  7. toony12345 👍 2 Answered B
    the answer is 100% B. Mandatory vacations: This policy requires employees to take vacations, which can help detect fraudulent activities and ensure that no one person is indispensable.
  8. Baba111222 👍 2 Answered D
    The question aske for "detecting" fraud, not "preventing". SoD prevents, while Job Rotation detects.
  9. BD69 👍 1 Answered C
    Separation of Duties (SoD): This practice involves dividing critical tasks among different employees to prevent any single individual from having complete control over a process. SoD is generally considered a more effective way to detect and prevent fraud compared to other methods. By assigning different roles to employees, it becomes harder for any one person to manipulate or conceal fraudulent activities.
  10. Jared77 👍 1 Answered D
    My bad. the answer is D "job rotation" . Detective : deployed to discover unwanted or unauthorized activity. Often are after-the-fact controls rather than real-time controls. For example : job rotation, mandatory vacations.... etc..
  11. Jared77 👍 1 Answered C
    By Chat GPT, "Separation of Duties (SoD) is generally considered a more effective way to detect and prevent fraud compared to job rotation."
  12. kevgjo 👍 2 Answered C
    Separation of duties
  13. maggie22 👍 1 Answered D
    discover employees secret.
  14. HaraTadahisa 👍 1 Answered D
    D is correct answer.
  15. greendophin 👍 1 Answered D
    choose D.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

MFA and Patch Management Control Type and Category

S-grade

Threat Hunting Data Sources for Exploitable Systems

S-grade

Full Weekly and Differential Daily Backup Strategy

S-grade

Access Auditing as the SaaS Vendor Risk to Focus On

S-grade

← Back to SY0-601 Study Guide