What is the primary role of access control in AI security?

• A. To implement permission-based visibility and prevent unauthorized data access
• B. To log every action
• C. To automatically repair vulnerabilities
• D. To enforce password changes daily

Answer: (A)

Access control governs who or what can access AI resources—data, models, and endpoints—and under what conditions. Its primary function is to enforce permission-based visibility so that only authorized users or processes can view or manipulate data, preventing unauthorized access and protecting confidentiality and integrity. In AI environments this means controlling who can train on sensitive data, access model weights, deploy inference services, or read outputs, and applying least-privilege principles. Other security activities like logging actions, automatic vulnerability repair, or enforcing daily password changes are important but serve different purposes: logs support auditing, remediation addresses flaws, and regular password changes are an authentication policy, not the core access-control function.