Which of the following specifies access privileges to a collection of resources by using the URL mapping?

Code Access Security (CAS) is a .NET framework security policy that restricts the permissions of code based on its origin or other characteristics, not on URL mapping for resource access.

A security constraint, particularly in Java web applications, is an element defined in the deployment descriptor (e.g., web.xml) that specifies access privileges to a collection of web resources. It uses URL patterns to map specific resources and defines which users or roles are authorized to access them, thereby enforcing access control based on the request URL.

Configuration Management is the process of establishing and maintaining consistency of a product's performance, functional, and physical attributes, not directly about specifying URL-based access privileges.

Access Management is a broader discipline covering all aspects of controlling access to resources, whereas a security constraint is a specific technical mechanism for implementing access control via URL mapping.