-> An action method is a public method in a controller that can be invoked using a URL. So by default if you have any public method in a controller then it can be invoked using a URL request. To restrict access to public methods in a  controller, NonAction attribute is used.
-> Another way to restrict access to methods in a controller is by making them private.