Certified Cloud Security Professional (CCSP) — Question 83

Which of the following is NOT a component of access control?

Answer options

• A. Accounting
• B. Federation
• C. Authorization
• D. Authentication

Correct answer: B

Explanation

The correct answer is B, Federation, as it refers to the process of linking a user's identity across multiple systems rather than a direct component of access control. The other options—Accounting, Authorization, and Authentication—are all essential elements that help manage who can access resources and what actions they can perform.