An access control list (ACL) enforces security by specifying which users have access to an object. Which option best describes this?

An access control list (ACL) enforces security by specifying which users have access to an object. Which option best describes this?

• A. It specifies which users have permission to access an object
• B. It defines network routing and firewall rules
• C. It stores encryption keys
• D. It only applies to file systems on mobile devices

Answer: (A)

An ACL is a list attached to an object that enumerates who is allowed to access it and what they can do. The system checks a user against this list to grant or deny access, so it directly specifies which users have permission to access the object. This is why it’s the best description. Other options describe different security concepts: or network rules control traffic rather than object-level permissions; storing encryption keys is a cryptographic task separate from access control lists; and ACLs aren’t limited to mobile file systems—they apply to many types of objects across various platforms.

An ACL is a list attached to an object that enumerates who is allowed to access it and what they can do. The system checks a user against this list to grant or deny access, so it directly specifies which users have permission to access the object. This is why it’s the best description.

Other options describe different security concepts: or network rules control traffic rather than object-level permissions; storing encryption keys is a cryptographic task separate from access control lists; and ACLs aren’t limited to mobile file systems—they apply to many types of objects across various platforms.