Which of the following models uses a directed graph to specify the rights that a subject can
transfer to an object or that a subject can take from another subject?

A.
Take-Grant Protection Model

B.
Bell-LaPadula Model

C.
Biba Integrity Model

D.
Access Matrix