Which mechanisms address threats to the application access domain by elevation of user privileges?

A.
Authentication and authorization

B.
Access control to storage objects and Access Control Lists (ACLs)

C.
Access control to storage objects and storage access monitoring

D.
User authentication and Information Rights Management (IRM)