Which term describes the list attached to an object that enumerates who can access it and what permissions they have?

• A. Authentication Log
• B. Encryption Key Registry
• C. Access Control List
• D. Audit Trail

Answer: (C)

Access control is about specifying who can access a resource and what operations they may perform. An Access Control List is the list attached to an object that enumerates each user or group and the permissions they have (for example, read, write, or execute). This allows precise, per-resource control: one user might be allowed to read and modify, another might only view, and others might be denied altogether.

The other items don’t define access rights: an authentication log records login attempts, not who can do what with the resource; an encryption key registry stores cryptographic keys; an audit trail logs events for accountability.