Which of the following security principles help to prevent employees from changing files they are intended only to view?

DLP (Data Loss Prevention) monitors and prevents sensitive data from leaving the organization, but does not control file modification permissions for internal users.

MDM (Mobile Device Management) manages and secures mobile devices and their policies, not file-level access permissions on workstations or servers.

ACLs are permission sets applied to files and folders that define which actions (read, write, execute) specific users or groups are allowed to perform; configuring read-only ACL entries ensures employees can view files without being able to alter them, directly enforcing the principle of least privilege.

MFA (Multi-Factor Authentication) verifies user identity during login but does not restrict what actions an authenticated user can perform on files once logged in.