Which of the following data security types would be used to enforce access management policies? (Select TWO)

Disk encryption protects data at rest from unauthorized access if the physical disk is stolen but does not enforce ongoing access management policies for active users of the system.

Access Control Lists (ACLs) are fundamental for access management as they define granular permissions for users and groups to specific files, folders, network resources, or applications, thereby enforcing who can access what. By evaluating a user's identity against the ACL, the system determines whether to grant or deny access to the requested resource.

Physical security, encompassing measures like locked server rooms, biometric scanners, and security guards, directly enforces access management by restricting unauthorized personnel from physically accessing and interacting with critical data storage devices and network equipment. Without adequate physical security, digital access controls can be circumvented.