To control access by a subject (an active entity such as individual or process) to an object (a passive entity such as a file) involves setting up: 

Answer options:

A. Access Rules
B. Access Matrix
C. Identification controls
D. Access terminal

A

Controlling access by a subject (an active entity such as individual or process) to an object (a passive entity such as a file) involves setting up access rules. These rules can be classified into three access control models: Mandatory, Discretionary, and Non-Discretionary. An access matrix is one of the means used to implement access control. Source: KRUTZ, Ronald L. & VINES, Russel
D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 33.