An Access Control List registers which of the following?

• A. Users (including groups, machines, processes) and the types of access they have been permitted.
• B. System hardware inventory
• C. Network routing policies
• D. Data retention schedules.

Answer: (A)

An Access Control List defines who can access a resource and what they can do with it. It explicitly lists the identities (users, groups, machines, or processes) and the specific access privileges granted to each. That’s exactly what the option describing users and the types of access they have been permitted captures, making it the best fit. The other items describe different management areas: hardware inventory tracks assets, routing policies govern network paths, and data retention schedules govern how long data is kept. An ACL isn’t about inventory, routing, or retention, but about who is allowed to access the resource and how.