Certified Information Privacy Technologist (CIPT) — Question 66

What is an Access Control List?

Answer options

• A. A list of steps necessary for an individual to access a resource.
• B. A list that indicates the type of permission granted to each individual.
• C. A list showing the resources that an individual has permission to access.
• D. A list of individuals who have had their access privileges to a resource revoked.

Correct answer: B

Explanation

The correct answer, B, defines an Access Control List as a list that specifies the permissions assigned to each user. Option A describes a process rather than a list, option C focuses on resources rather than permissions, and option D refers to revoked access, which does not align with the purpose of an Access Control List.