A company conducts sensitive research and development and wants a strict environment for
enforcing the principles of need to know, separation of duties, and least privilege. Which of the
following should the company implement?

A.
Mandatory Access Control (MAC)

B.
Discretionary Access Control (DAC)

C.
Single sign on

D.
Single factor authentication