Which of the following is a conceptual component that determines if a subject can access an object? Reference monitor Access Control Security Kernel Identification and Authentication

The correct answer is **Access Control**. Access Control is a conceptual component that determines whether a subject (such as a user or a process) can access an object (such as a file, system, or resource). It establishes policies and mechanisms for determining who can access what and under what conditions. While the other options are related to security concepts, Access Control specifically focuses on the permissions and rules governing access rights.