Refer to the information below to answer the question. A large organization uses unique identifiers and requires them at the start of every system session. Application access is based on job classific

Least privilege is a security principle that limits user access to only what is necessary for their job, but it is not itself an access control methodology or model that defines how access decisions are structured.

Lattice Based Access Control (LBAC) is a model that uses a lattice structure of sensitivity labels and clearance levels to govern access, typically associated with mandatory access control (MAC) environments, not job-classification-based role assignments.

Role Based Access Control (RBAC) grants access to resources based on a user's role or job classification within the organization, which directly matches the scenario's statement that 'application access is based on job classification.' In RBAC, administrators define roles aligned to job functions and assign permissions to those roles, so users inherit access rights through their assigned role rather than receiving individual permissions.

LDAP (Lightweight Directory Access Protocol) is a network protocol used to query and modify directory services such as Active Directory, not an access control methodology or model that defines how permissions are assigned.