What term describes the process of restricting access to data based on data sensitivity, user clearance, rights, and permissions?

What term describes the process of restricting access to data based on data sensitivity, user clearance, rights, and permissions?

• A. Authentication and authorization
• B. System access controls
• C. Auditing
• D. Detection Controls

Answer: (A)

Access control is the mechanism that restricts who can view or modify data based on data sensitivity, user clearance, rights, and permissions. To enforce this, authentication verifies who you are, and authorization determines what you’re allowed to do with the data. Together, they ensure only legitimate users with the appropriate permissions can access sensitive information. Auditing records access for accountability, but it doesn’t prevent access. Detection controls focus on identifying security events, not on controlling entry. System access controls is a broad term that can include many measures but doesn’t itself describe the specific two-step process of verifying identity and granting rights.

Access control is the mechanism that restricts who can view or modify data based on data sensitivity, user clearance, rights, and permissions. To enforce this, authentication verifies who you are, and authorization determines what you’re allowed to do with the data. Together, they ensure only legitimate users with the appropriate permissions can access sensitive information. Auditing records access for accountability, but it doesn’t prevent access. Detection controls focus on identifying security events, not on controlling entry. System access controls is a broad term that can include many measures but doesn’t itself describe the specific two-step process of verifying identity and granting rights.