Why is this the correct answer?

Hello,
I'm newbee in this field and practicing for an exam and there is 2 questions below I cannot understand why is the correct answer what it is.
Question 1: In our access control implementations, keeping the IAAA model in mind, which of this could we use for authorizations?
Correct answer: Role based access control.

Question 2: We are implementing new access control in our organization. If we look at the IAAA model, what could we use for authentication?
Correct …

access access control control cybersecurity exam hello question questions role understand