With __________, access decisions are based on the roles that individual users have as part of an
organization.

A.
Server based access control.

B.
Rule based access control.

C.
Role based access control.

D.
Token based access control.

Explanation:
With role-based access control, access decisions are based on the roles that individual
users have as part of an organization. Users take on assigned roles (such as doctor,
nurse, teller, manager). The process of defining roles should be based on a thorough
analysis of how an organization operates and should include input from a wide spectrum
of users in an organization.