Identity-based access control is a subset of which one of the following
access control categories?

A.
Discretionary access control

B.
Lattice-based access control

C.
Non-discretionary access control

D.
Mandatory access control

Explanation:
The correct answer is “Discretionary access control”. Identity-based access control is a type of
discretionary access control that grants access privileges based on
the user’s identity. A related type of discretionary access control is
user-directed access control that gives the user, with certain
limitations, the right to alter the access control to certain objects.