Which of the following pairings is NOT correct?

• A. Description: Automated process for managing access requests. Term: Access Request Workflow.
• B. Description: Summarizes roles instead of granular access details. Term: Access Review Reports.
• C. Description: Checks requests against business rules automatically. Term: Request Authorization.
• D. Description: Plan to align identity management with business needs. Term: IAM Strategy.

Answer: (C)

The main idea here is matching IAM concepts to the right terms used for how access is handled. When a request is evaluated, the system checks it against defined policies or business rules and makes an authorization decision—grant or deny—based on those evaluations. The term that describes the act of deciding whether to allow access after evaluating rules is more about the authorization decision itself or policy-based access control, not a label that literally means “checking rules” alone. So pairing the description “checks requests against business rules automatically” with the term “Request Authorization” isn’t the best fit, because the name implies the action of authorizing, rather than the full automatic policy evaluation process.

The other pairings fit well: an automated process for handling the lifecycle of access requests is the Access Request Workflow, which captures the end-to-end flow from request submission through approval or denial. A description noting that roles are summarized rather than detailing each granular entitlement aligns with Access Review Reports, which provide a high-level view of role assignments and potential privilege issue areas. And a plan to align identity management with business needs maps naturally to an IAM Strategy, the overarching plan guiding how identities and access controls support business goals.