Which term describes the active entity that attempts to access resources?

Which term describes the active entity that attempts to access resources?

• A. Subject
• B. Object
• C. Reference Monitor
• D. Operation

Answer: (A)

In access control, the active entity that requests access to resources is called a subject. A subject can be a person or a process acting on behalf of a person, the agent that initiates the access request. The resource it tries to reach is the object, which is the passive item being protected. The reference monitor is the trusted mechanism that enforces the policy by mediating every access request, deciding allow or deny. The operation is the specific action requested—like read, write, or execute—not the actor itself. So, the term that describes the active entity making the access attempt is the subject.

In access control, the active entity that requests access to resources is called a subject. A subject can be a person or a process acting on behalf of a person, the agent that initiates the access request. The resource it tries to reach is the object, which is the passive item being protected. The reference monitor is the trusted mechanism that enforces the policy by mediating every access request, deciding allow or deny. The operation is the specific action requested—like read, write, or execute—not the actor itself. So, the term that describes the active entity making the access attempt is the subject.