Which term best matches the following definition: Framework defining permissions for subjects and objects?

• A. Access Control Matrix
• B. Identity Synchronization
• C. Self-service Requests
• D. Object Identifier (OID)

Answer: (A)

The concept being tested is how permissions are structured for who can do what to which resource. An access control matrix is the model that represents these rights as a table: each row is a subject (such as a user or process), each column is an object (like a file or resource), and the cell at their intersection lists the allowed operations. This abstract framework is what underpins how authorization is defined and then implemented in practice, often by turning the matrix into access control lists on objects or capability lists on subjects. The other terms don’t fit because identity synchronization is about aligning user identities across systems, self-service requests are about requesting access, and an object identifier names the resource, not its permissions.