How can an application prevent Broken Access Control vulnerabilities?

Question $2$Answer

a$.$

Using weak passwords

b$.$

Implementing role$-$based access control $($RBAC$).$

c$.$

Using unpatched software

d$.$

Avoiding user authentication