Which of the following BEST enables an IS auditor to combine and compare access control lists from various applications and devices?

Audit hooks are specific code segments inserted into applications to log events, but they do not inherently provide a mechanism for combining and comparing ACLs across multiple systems.

An Integrated Test Facility (ITF) involves creating dummy transactions to test controls within a live system and is not designed for comparing access control lists across various applications.

Snapshots capture the state of a system at a specific point in time, which can include ACLs, but they are a data capture method, not a tool for combining and comparing data from multiple, disparate sources.

Data analytics tools are specifically designed to collect, process, and analyze large volumes of data from disparate sources. An IS auditor can use these tools to ingest ACLs from various applications and devices, normalize their formats, and then run queries and algorithms to identify inconsistencies, unauthorized access, or policy violations across the entire IT landscape.