The MOST effective method for an IS auditor to determine which controls are functioning in an operating system is to:

A. compare the current configuration to the corporate standard.
B. consult with the systems programmer.
C. consult with the vendor of the system.
D. compare the current configuration to the default configuration.