In mandatory access control, the authorization of a subject to have access
to an object is dependent upon:

A.
Roles.
B.
Labels.
C.
Tasks.
D.
Identity.
Explanation:
The correct answer is Labels. Mandatory access controls use labels to
determine whether subjects can have access to objects, depending on
the subjects’ clearances. Answer roles is applied in non-discretionary
access control as is tasks. Identity, is used in discretionary
access control.