Which of the following common access control models is commonly used on systems to ensure a “need to
know” based on classification levels?
Role Based Access Controls
Mandatory Access Controls
Discretionary Access Controls
Access Control List
Mandatory Access Control allows access to be granted or restricted based on the rules of classification. MAC
also includes the use of need to know. Need to know is a security restriction where some objects are restricted
unless the subject has a need to know them.