Which of the following pairings is NOT correct?

• A. Description: Approvals process for access requests. Term: Request Authorization.
• B. Description: Policies ensuring protection from unauthorized access. Term: Access Controls.
• C. Description: Framework for assessing current IAM capabilities. Term: Capability Maturity Model.
• D. Description: Plan to align identity management with business needs. Term: Access Review Reports.

Answer: (D)

Understanding how IAM terms map to their descriptions helps you spot mismatches. An approvals process for access requests is about who can grant permission and under what conditions, so it aligns with request authorization because that step determines whether access should be granted. Policies that protect against unauthorized access are implemented through access controls, the mechanisms and rules that enforce who can do what. A framework for assessing current IAM capabilities—how mature or capable the IAM processes are—fits the Capability Maturity Model, which measures process maturity, including IAM. The description about a plan to align identity management with business needs corresponds to an IAM strategy or governance plan, not a set of ongoing review outputs. Access Review Reports are the outputs of periodic reviews, documenting findings and actions, rather than a plan to align IAM with business goals. So the term that does not fit the given description is the one that should be associated with plan alignment, not with an ongoing governance plan; hence it’s not correct.