An organization wants to strengthen its security system by enforcing access policies that cannot be altered by user preferences or actions. Which approach will BEST ensure this requirement?
Role-based access controls
Least privilege model applied by users
Mandatory access controls
Discretionary access controls