Mark works as a Network Administrator for NetTech Inc. He wants users to access only those resources that are required for them. Which of the following access control models will he use?

Mandatory Access Control (MAC) enforces access based on security labels and classifications assigned by a central authority, not by job role or resource need.

RBAC assigns permissions to roles rather than individuals, and users are assigned to appropriate roles - this directly enforces least-privilege access by limiting each user to only the resources required for their specific job function. It is the standard model used when an administrator wants to align access rights with organizational roles. This makes it ideal for managing large numbers of users with predictable job-based access needs.

Discretionary Access Control (DAC) allows resource owners to grant or revoke access at their own discretion, which does not systematically limit users to only required resources.

Policy Access Control is not a recognized standard access control model in information security frameworks.