Which of the following access control models uses a predefined set of access privileges for an object of a system?

Role-Based Access Control (RBAC) grants permissions to users based on their assigned organizational roles, not on predefined security levels of objects.

Discretionary Access Control (DAC) allows object owners to set permissions for other users, meaning privileges are determined by the owner, not a predefined system-wide set.

Policy Access Control is a broad term and not a specific, recognized access control model that inherently uses a predefined set of privileges for objects; MAC is a type of policy-based control.

Mandatory Access Control (MAC) enforces access based on system-wide security policies, where subjects and objects are assigned sensitivity labels (e.g., Top Secret, Confidential). Access decisions are made by the operating system based on a predefined set of immutable rules comparing these labels, meaning privileges are fixed and not discretionary.