Which term represents a policy or mechanism that restricts access to resources?

Which term represents a policy or mechanism that restricts access to resources?

• A. Security Objectives
• B. Forensics Analysis
• C. Failed Login Attempts
• D. Access Control

Answer: (D)

Access control is the policy and set of mechanisms that determine who can access which resources and what they’re allowed to do. It translates security goals into enforceable rules, using tools like access control lists, roles, and policy engines (RBAC, ABAC, or similar) to grant or deny permissions based on identity, attributes, and context. This is why it’s the best answer: it directly represents the means by which access to resources is restricted and managed. Security objectives are high-level goals (such as confidentiality, integrity, and availability) rather than the specific methods used to restrict access. Forensics analysis concerns investigating and understanding incidents after they occur. Failed login attempts are events that signal potential issues or trigger responses, not the mechanism that enforces access restrictions.

Access control is the policy and set of mechanisms that determine who can access which resources and what they’re allowed to do. It translates security goals into enforceable rules, using tools like access control lists, roles, and policy engines (RBAC, ABAC, or similar) to grant or deny permissions based on identity, attributes, and context. This is why it’s the best answer: it directly represents the means by which access to resources is restricted and managed.

Security objectives are high-level goals (such as confidentiality, integrity, and availability) rather than the specific methods used to restrict access. Forensics analysis concerns investigating and understanding incidents after they occur. Failed login attempts are events that signal potential issues or trigger responses, not the mechanism that enforces access restrictions.