Q). Which of the following would an IS auditor review to BEST determine user access to systems or data?

A. Access-control lists (ACLs)
B. User account management
C. Systems logs
D. Applications logs

Answer:

The Information Systems Auditor will review the Access Control Lists i.e ACL in order to determine the users access to information systems. Thus the answer is "A". Rest of the options are incorrect.