Which of the following access control models use security labels to make access decisions?

Mandatory Access Control (MAC) enforces access decisions based on security labels or sensitivity levels assigned to both subjects (users) and objects (files, resources). The operating system or security kernel strictly controls access based on these labels, preventing users from altering access permissions, ensuring adherence to a central security policy.

Role-based access control (RBAC) assigns permissions based on a user's role within an organization, not directly using security labels.

Identity-based access control (IBAC) is not a standard, widely recognized access control model that primarily uses security labels for access decisions.

Discretionary access control (DAC) allows the owner of a resource to define permissions, typically using access control lists (ACLs), not security labels.