The process of determining what resources a user can access.

• A. Access control
• B. Authorization
• C. Authentication
• D. Audit

Answer: (B)

Authorization is the process of determining what resources a user can access. After authentication verifies who the user is, authorization checks the permissions, roles, and policies that apply to that user to decide what actions and resources are allowed. This decision governs access to files, databases, networks, and applications, and is typically enforced through mechanisms like access control lists, role-based access control, or attribute-based access control. Access control is the broader framework that includes the policies and enforcement methods, while authentication focuses on proving identity, and audit involves recording and reviewing access events.