Which of the following common access control models is commonly used on systems to ensure a “need to
know” based on classification levels?

A.
Role Based Access Controls

B.
Mandatory Access Controls

C.
Discretionary Access Controls

D.
Access Control List

Explanation:
Mandatory Access Control allows access to be granted or restricted based on the rules of classification. MAC
also includes the use of need to know. Need to know is a security restriction where some objects are restricted
unless the subject has a need to know them.