Which of the following BEST restricts users to those functions needed to perform their duties?

A.
Application level access control

B.
Data encryption

C.
Disabling floppy disk drives

D.
Network monitoring device

Explanation:
The use of application-level access control programs is a management control that restricts access by
limiting users to only those functions needed to perform their duties. Data encryption and disabling
floppy disk drives can restrict users to specific functions, but are not the best choices. A network
monitoring device is a detective control, not a preventive control.