Which Is True About Access Control Policies

Multiple Choice

Which is true about access control policies?

A) All resources should be locked down as much as possible to prevent security problems.
B) Users' needs should be assessed based on the group to which they belong,and they should be given the minimum access needed to perform their job duties.
C) Each user's needs should be assessed and they should be given the minimum access needed to perform their job duties.
D) Users should be provided access to all resources they deem necessary for their work.