Where in the network hierarchy should network access control be performed?

Where in the network hierarchy should network access control be performed?
A. backbone
B. core
C. access
D. distribution