ISC2 Certified in Cybersecurity (CC) Practice Question

In a mandatory access control (MAC) model, every object (such as a file) carries a security classification label, and every subject (such as a user) has an assigned clearance level. The operating system compares the user's clearance to the file's classification before granting access. If the clearance meets or exceeds the classification level, the read request is allowed; otherwise, it is denied. File owners cannot override this decision, roles alone do not suffice, and contextual factors like time of day are independent of the core MAC rule.