Scenario: An access control list includes groups, machines, and processes in addition to individual users. This illustrates which concept?

• A. Access control list
• B. Security policy
• C. Data classification
• D. Encryption standard

Answer: (A)

An access control list defines who or what can access a resource and what actions they may perform. The scenario shows an ACL that includes not only individual users but also groups, machines, and processes. This demonstrates how ACLs allow permissions to be granted to collections of users (groups) and to non-user entities like host machines and running processes, enabling scalable, flexible authorization without tying permissions only to people. Security policy is a broader set of rules for protecting the system, data classification is about labeling data by sensitivity, and an encryption standard concerns the cryptographic methods used. So this illustrates an ACL.