Which term refers to mechanisms that restrict unauthorized users from accessing critical assets?

Which term refers to mechanisms that restrict unauthorized users from accessing critical assets?

• A. Phish Tank
• B. Separation and rotation of duties
• C. Controlled access
• D. OhPhish

Answer: (C)

Access control is about making sure only authorized users can interact with assets. The term that best fits this idea is controlled access, which embodies the mechanisms that enforce who can access critical resources. This involves authenticating who a user is and authorizing what they’re allowed to do, often implemented through policies, access control lists, or role-based access controls, and is supported by auditing and monitoring. The other options don’t describe mechanisms that gate access to assets. Terms that sound like phishing-related concepts are distractors, and while separation and rotation of duties helps reduce insider risk by preventing a single person from abusing privileges, it doesn’t itself constitute the mechanism that restricts access to assets.

Access control is about making sure only authorized users can interact with assets. The term that best fits this idea is controlled access, which embodies the mechanisms that enforce who can access critical resources. This involves authenticating who a user is and authorizing what they’re allowed to do, often implemented through policies, access control lists, or role-based access controls, and is supported by auditing and monitoring.

The other options don’t describe mechanisms that gate access to assets. Terms that sound like phishing-related concepts are distractors, and while separation and rotation of duties helps reduce insider risk by preventing a single person from abusing privileges, it doesn’t itself constitute the mechanism that restricts access to assets.