Which elements are used to implement access control in CBM T6 data management?

• A. Roles, authentication, and audit logs.
• B. Passwords only.
• C. Access cards without logs.
• D. Physical locks only.

Answer: (A)

Access to data must be controlled in a way that verifies who is allowed to do what and keeps a record of actions. Roles organize permissions by job function, so users gain the appropriate capabilities without granting excessive access. Authentication confirms the user’s identity before they can access systems. Audit logs provide a traceable record of who did what and when, enabling monitoring and incident response. In CBM T6 data management, combining these elements—roles for proper authorization, authentication for identity verification, and audit logs for accountability—gives a complete, enforceable access-control framework.

Passwords alone cover only authentication and miss authorization and traceability. Access cards without logs verify identity but don’t create a usable audit trail. Physical locks address physical access but ignore digital data and ongoing accountability.