Which concept pertains to enforcing policies and authentication to control who can access resources?

Which concept pertains to enforcing policies and authentication to control who can access resources?

• A. Strong IAM Controls
• B. Incident Response Planning
• C. Access Enforcement
• D. Data Encryption

Answer: (C)

Access enforcement is about applying policy rules and authenticating identities to control who can access resources. It combines verifying who someone is (authentication) with authorization decisions that check roles, attributes, and policies to grant or deny access, ensuring access is limited to what is permitted. This directly supports the principle of least privilege by enforcing who can do what, when, and where. While strong IAM controls describe the framework, and data encryption or incident response planning address other security concerns, access enforcement specifically captures the action of applying policies to gate access to resources.

Access enforcement is about applying policy rules and authenticating identities to control who can access resources. It combines verifying who someone is (authentication) with authorization decisions that check roles, attributes, and policies to grant or deny access, ensuring access is limited to what is permitted. This directly supports the principle of least privilege by enforcing who can do what, when, and where. While strong IAM controls describe the framework, and data encryption or incident response planning address other security concerns, access enforcement specifically captures the action of applying policies to gate access to resources.