What term describes the collection of entries that determine which subjects are allowed or denied access to a resource?

What term describes the collection of entries that determine which subjects are allowed or denied access to a resource?

• A. Access control entries (ACEs)
• B. Access control lists (ACL)
• C. Permissions
• D. Security descriptors

Answer: (B)

Access control lists define who can access a resource by listing the entries. Each entry, known as an Access Control Entry, specifies a subject (user or group) and whether access is allowed or denied and for which operations. The collection of these entries is the ACL. Permissions are the actual rights granted, while a security descriptor is a broader structure that can contain the ACL (along with owner and group) but isn’t the collection itself.

Access control lists define who can access a resource by listing the entries. Each entry, known as an Access Control Entry, specifies a subject (user or group) and whether access is allowed or denied and for which operations. The collection of these entries is the ACL. Permissions are the actual rights granted, while a security descriptor is a broader structure that can contain the ACL (along with owner and group) but isn’t the collection itself.