Role-based access control is useful when:

A.
Access must be determined by the labels on the data.

B.
Rules are needed to determine clearances.

C.
There are frequent personnel changes in an organization.

D.
Security clearances must be used.

Explanation:
The correct answer is “There are frequent personnel changes in an organization.”. Role-based access
control is part of nondiscretionary access control. The other options relate to mandatory access
control.