Which term is used to describe the requirement that only authorized users gain access to resources?

• A. Iris Recognition
• B. Access Control
• C. Forensics Analysis
• D. Failed Login Attempts

Answer: (B)

Access control is the practice that ensures only authorized users can access resources. It encompasses the processes of authenticating who someone is and authorizing what they are allowed to do once verified. When a system checks credentials, verifies identity, and then grants or denies access based on permissions, it is implementing access control. This makes it the appropriate term for the requirement described, as it directly defines the governance over who may reach data, applications, or networks.

Biometric methods like iris recognition are techniques used during authentication, one part of the overall access-control process, but they’re not the label for the requirement itself. Forensics analysis focuses on examining and learning from security incidents after they occur, not on controlling access upfront. Failed login attempts signal potential unauthorized activity but do not define the permission framework that governs access.