What is the access control subject? a. The passive entity that is the target of an access request b. The active entity that initiates an access request c. A specific type of access requested d. The...

What is the access control subject? a. The passive entity that is the target of an access request b. The active entity that initiates an access request c. A specific type of access requested d. The authentication service that processes the access request Which statement best describes the principle of least privilege? a. Only allow the minimum number of defined users to access a system. b. An object should allow only data owners to access it. c. A subject should be granted only the permissions to accomplish a task and nothing more. d. An object should grant access only to subjects through one model and nothing more.