Which of the following is true about an access control list?

An access control list is simple to understand and maintain.

It is difficult to maintain an access control list as the number of users and information resources increase.

Each information resource is managed separately, thus it's difficult to add or remove a user.

All of the above