Which of the following pairings is NOT correct?

• A. Description: Summaries roles instead of granular access details. Term: IAM Strategy.
• B. Description: Policies ensuring protection from unauthorized access. Term: Access Controls.
• C. Description: Avoids harmful combinations of access permissions. Term: Toxic Access Prevention.
• D. Description: Plan to align identity management with business needs. Term: Access Review Reports.

Answer: (A)

In IAM terms, descriptions should map to established concepts or artifacts that directly reflect how access is governed and validated.

Summaries of roles rather than granular access details point to a role-based view, which is about structuring permissions around roles rather than describing a strategic governance program. That mismatch makes this pairing incorrect.

Policies that protect against unauthorized access align directly with Access Controls, which are the mechanisms and rules that enforce who can do what, where, and when.

Avoiding harmful combinations of access permissions captures the risk-management idea behind preventing conflicting or excessive permissions; while the phrasing “Toxic Access Prevention” isn’t a standard label, the concept it denotes fits with the practice of mitigating risky permission combinations.

Plans to align identity management with business needs are supported by Access Review Reports, which provide governance and evidence that access rights reflect business requirements and stay appropriate over time.