Which of the following are variants of mandatory access control mechanisms? (Choose two.)

A.
Two factor authentication

B.
Acceptable use policy

C.
Username / password

D.
User education program

E.
Sign in register