KT-FIN Financial workflow protection

AP clerks can create vendors and pay them. BEST SoD change?

Multiple choice — select one answer

Answer choices

  1. a. Give everyone Domain Admin, without security or identity team coordination per policy.
  2. b. Separate vendor master maintenance from payment initiation roles
  3. c. Disable logging, without security or identity team coordination per policy.
  4. d. Allow shared clerk login, without security or identity team coordination per policy.

Architectural breakdown & explanation

Creating vendors and paying is high-risk combined role.

Correct answer(s): b. Separate vendor master maintenance from payment initiation roles

Exam domain: Financial workflow protection (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Financial Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.