I need help with this multiple question.

Earlier versions of our software had only one user account and password combination for the administrator. Now, we ship it with a hierarchy of passwords so that they should enter multiple passwords for more sensitive functions. This is a security design practice called

		access control.
		least astonishment.
		modularity.
		separation of domains.

which can it be?