a banking app requires stringent access control measures for security reasons. which of the following techniques could be used to define who can use the app and what actions they can perform?