Which of the following statements about role-based access control (RBAC) model is true?

Uniquely assigning permissions to each individual user account describes Discretionary Access Control (DAC), not RBAC, because RBAC attaches permissions to roles rather than to individual accounts.

In RBAC, permissions are assigned to roles that reflect job functions, and users gain access rights by being assigned to the appropriate role. This approach enforces least privilege based on organizational responsibilities, simplifies access administration, and ensures consistent policy enforcement across users with the same function.

Assigning the same permission to every user account describes an undifferentiated access model with no meaningful access control, which is neither RBAC nor a recognized secure access model.

Granting access based on seniority or rank is not a standard access control model; RBAC is based on job function and role assignment, not on hierarchical organizational tenure.