What is the main advantage of using a mandatory access control (MAC) model instead of a discretionary access control (DAC) model?

Mandatory Access Control (MAC) is considered more secure than DAC because a central authority or the operating system enforces access decisions based on predefined security policies and sensitivity labels. Unlike DAC, users or data owners cannot override these policies, ensuring consistent and strict adherence to organizational security requirements.

This describes Discretionary Access Control (DAC), where data owners control access, which is generally considered less secure than MAC's centralized control.

Assigning permissions based on roles is characteristic of Role-Based Access Control (RBAC), not the primary distinguishing factor of MAC over DAC regarding security policy enforcement.

MAC is typically more complex to implement and manage than DAC due to its strict labeling and policy enforcement, making it harder, not easier, to implement.