Which of the following common access control models is commonly used on systems to ensure a
“need to know” based on classification levels?
A.
Role Based Access Controls
B.
Mandatory Access Controls
C.
Discretionary Access Controls
D.
Access Control List
Explanation:
Mandatory Access Control allows access to be granted or restricted based on the rules ofclassification. MAC also includes the use of need to know. Need to know is a security restriction
where some objects are restricted unless the subject has a need to know them.