Which term corresponds to the description 'Policies ensuring protection from unauthorized access'?

Which term corresponds to the description 'Policies ensuring protection from unauthorized access'?

• A. Toxic Access Prevention
• B. Access Controls
• C. Access Review Reports
• D. IAM Strategy

Answer: (B)

Access controls are the mechanisms and policies that determine who can access which resources and under what conditions, providing protection against unauthorized access. They enforce authentication (proving identity) and authorization (granting the right to act on a resource), and they enforce rules at the point of access to prevent anyone who isn’t allowed from proceeding. Practical implementations include access control lists, role-based access control, and the principle of least privilege, all aimed at ensuring that only authorized users can reach the resources they are permitted to. Toxic Access Prevention isn’t a recognized concept in IAM and doesn’t describe a real approach. Access Review Reports are about checking and validating who currently has access, useful for auditing and compliance, but they don’t by themselves prevent unauthorized access. IAM Strategy refers to the overall plan for managing identities and access across an organization, not the specific control mechanism that blocks unauthorized access. So the term that best fits “Policies ensuring protection from unauthorized access” is access controls.

Access controls are the mechanisms and policies that determine who can access which resources and under what conditions, providing protection against unauthorized access. They enforce authentication (proving identity) and authorization (granting the right to act on a resource), and they enforce rules at the point of access to prevent anyone who isn’t allowed from proceeding. Practical implementations include access control lists, role-based access control, and the principle of least privilege, all aimed at ensuring that only authorized users can reach the resources they are permitted to.

Toxic Access Prevention isn’t a recognized concept in IAM and doesn’t describe a real approach. Access Review Reports are about checking and validating who currently has access, useful for auditing and compliance, but they don’t by themselves prevent unauthorized access. IAM Strategy refers to the overall plan for managing identities and access across an organization, not the specific control mechanism that blocks unauthorized access.

So the term that best fits “Policies ensuring protection from unauthorized access” is access controls.