Which statement describes the function of accounting in access control?

• A. To enforce password complexity.
• B. To assign user roles.
• C. To determine system configurations.
• D. To record actions for auditing and traceability.

Answer: (D)

Accounting in access control is about recording what happens when users interact with the system. It creates an audit trail—the who, what, when, and where of actions—so you can trace activities back to individuals and times. This logging supports accountability, incident response, and regulatory compliance by making it possible to review events after the fact. The other aspects address different functions: enforcing password complexity relates to authentication policy, assigning user roles is about authorization, and determining system configurations is a matter of system administration. Recording actions for auditing and traceability best describes accounting in access control.