Which of the following pairings is NOT correct?

• A. Description: Checks requests against business rules automatically. Term: Access Request Validation.
• B. Description: Approval process for access requests. Term: Access Controls.
• C. Description: Document detailing user access requests. Term: Access Request Form.
• D. Description: Automated process for managing access requests. Term: Access Request Workflow.

Answer: (B)

Access controls are the mechanisms that enforce who can do what—policies, permissions, and role-based access decisions that govern actions after authentication. An approval process for access requests is part of the workflow or governance process that determines whether access should be granted, not the enforcement mechanism itself. The other pairings align with their terms: automatic rule checks map to Access Request Validation as a validation step, a document detailing requests maps to Access Request Form, and an automated process for handling requests maps to Access Request Workflow. So, pairing an approval process for access requests with Access Controls is not correct because approvals belong to the workflow, while controls are about enforcing permissions.