@Snow preck The correct answer in this case is a,b,c. The mock test tool you are using is misleading. It is not mandatory for the other matching access controls for the records to evaluate to true. In case if one object is governed by multiple ACLs (situated at the same level) only one of them need to evaluate to true.