Which two mechanisms address threats of elevating user privileges in the application access domain?

A.
Authentication and authorization

B.
Access control to storage objects and Access Control Lists (ACLs)

C.
Access control to storage objects and auditing

D.
User authentication and Information Rights Management (IRM)