For a semester exam, which option is correct about access control?

A. enforcing permissions on resources and actions B. using shared admin accounts C. ignoring roles D. granting public write access