ISC2 CISSP Practice Question
A global financial institution is implementing a new security model where access to sensitive financial data is determined by user clearance levels that are assigned by the security team. Users cannot share or transfer access rights to other users. Which access control model BEST describes this implementation?
Discretionary Access Control (DAC)
Role-Based Access Control (RBAC)
Attribute-Based Access Control (ABAC)
Mandatory Access Control (MAC)