146. Which of the following audit techniques would an IS auditor place the MOST reliance on when determining whether an employee practices good preventive and detective security measures?
A. Observation
B. Detail testing
C. Compliance testing
D. Risk assessment
答案为A,为什么?