Which DSAC domain listed deals with access rights management?

• A. Software Assurance
• B. Access Control
• C. Incident Response
• D. Cryptography

Answer: (B)

Access control is the area that governs who can access which resources and what they may do with them. This domain focuses on access rights management, including defining roles and permissions, authenticating identities, and enforcing authorization policies to ensure that only the right people can perform specific actions. It embodies the principle of least privilege and supports processes like access reviews and audit logging so you can verify who had access to what and when. The other domains address different security concerns: Software Assurance covers secure software development and assurance practices; Incident Response deals with detecting, containing, and recovering from security incidents; Cryptography focuses on protecting data through encryption and related cryptographic techniques.