CISA Certified Information Systems Auditor – Question1351

An IS auditor is following upon a finding that determined elevated administrator accounts for servers were not being properly checked out and then back in after each use. Which of the following is the MOST appropriate sampling technique to determine the scope of the problem?

A.
Stratified sampling
B. Random sampling
C. Attribute sampling
D. Statistical sampling

Correct Answer: C