Which term describes the set of rules that determine access rights for users and groups in a system?

Which term describes the set of rules that determine access rights for users and groups in a system?

• A. Access Control List (ACL)
• B. Firewall rules
• C. Security policy
• D. Authentication policy

Answer: (A)

Access control lists specify who can access a resource and what they can do with it. An ACL attaches to an object and lists the users or groups along with their granted permissions (such as read, write, or execute). This directly captures the set of rules that determine access rights for users and groups in a system. The other options relate to different security areas: firewall rules manage network traffic, a security policy is a broad organizational rule set, and an authentication policy focuses on how identities are verified. So the term that best describes the given concept is the access control list.

Access control lists specify who can access a resource and what they can do with it. An ACL attaches to an object and lists the users or groups along with their granted permissions (such as read, write, or execute). This directly captures the set of rules that determine access rights for users and groups in a system. The other options relate to different security areas: firewall rules manage network traffic, a security policy is a broad organizational rule set, and an authentication policy focuses on how identities are verified. So the term that best describes the given concept is the access control list.