In regards to network security, ________ is the policy-driven control of access to systems, data, and dialogues.

• A. Confidentiality
• B. Integrity
• C. Access Control
• D. Availability

Answer: (C)

Access control is the policy-driven mechanism that governs who is allowed to access systems, data, and communications, and under what conditions. It relies on defined policies—such as roles (RBAC), attributes (ABAC), or simple access lists—to specify permissions and then enforces them at authentication and authorization points across the network and applications. This makes sure that only authorized entities can reach the resources and engage in dialogues, aligning access with organizational rules and risk requirements.

Confidentiality, integrity, and availability describe security objectives: confidentiality aims to prevent unauthorized disclosure, integrity protects data from unauthorized alteration, and availability ensures resources are accessible when needed. They’re goals that the access control mechanisms help achieve, rather than the mechanism itself.