ISC2 Certified in Cybersecurity (CC) Practice Question

Mandatory Access Control (MAC) enforces access decisions through system-wide security policies based on object sensitivity labels and subject clearance levels. Individual data owners cannot alter these rules, so data labeled Secret can be opened only by users with at least Secret clearance. Discretionary Access Control relies on owners to set permissions and therefore would not meet the requirement. Role-Based Access Control assigns rights by job role rather than by clearance label. Attribute-Based Access Control evaluates a broader set of attributes and policies but does not rely strictly on hierarchical classifications enforced by the system kernel.