Exam CISSP-ISSAP topic 2 question 70 discussion

Access control can be deployed in the following categories: C. Administrative access control D. Preventive access control Explanation: C. Administrative access control involves policies, procedures, and measures that determine how access controls are managed within an organization. It includes the creation of user accounts, defining roles, and establishing overall access control policies. D. Preventive access control includes measures designed to prevent unauthorized access to information and resources. This can involve technologies such as firewalls, encryption, and authentication mechanisms that restrict access.