Which of the following statements regarding access control models is FALSE?

A.
The MAC model uses predefined access privileges to a resource to determine a user’s access permissions to a resource.

B.
The RBAC model uses the role or responsibilities users have in the organization to determine a user’s access permissions to a resource.

C.
In the DAC model a user’s access permissions to a resource is mapped to the user’s account.

D.
The MAC model uses Access Control Lists (ACLs) to map a user’s access permissions to a resource.