Which term describes the practice of ensuring only authorized users can access a resource?

• A. Access control
• B. Encryption
• C. Audit
• D. Data integrity

Answer: (A)

Access control is the practice of ensuring only authorized users can access a resource. It combines verifying who someone is (authentication) with checking what they’re allowed to do (authorization), applying roles, permissions, and the principle of least privilege so sensitive data and functions aren’t exposed to those who shouldn’t see them. This is essential in healthcare to protect patient information and meet privacy requirements. Encryption protects data from being read if it’s accessed by someone, but it doesn’t determine who is allowed to access the resource or decrypt it. Audit logs monitor who accessed what and when, but they don’t prevent access in real time. Data integrity focuses on keeping data accurate and unaltered, not on controlling access.