A new startup company is growing and wants to deploy a human resources management system on a private cloud that is only accessible to the human resources department. Which of the following is the…

Discretionary Access Control (DAC) allows the owner of a resource, or someone with appropriate permissions, to grant or revoke access to other users at their discretion. This model is well-suited for a departmental system where the HR department can manage who within their department has access to the HRM system.

Mandatory Access Control (MAC) is a more rigid model where access is determined by a central authority based on security labels, typically used in high-security environments, and is less flexible for departmental management.

Non-discretionary access control is a broad category encompassing models like Role-Based Access Control (RBAC) or Rule-Based Access Control, where access is determined by predefined rules or roles rather than direct owner discretion.

Comprehensive access control is a descriptive term and not a recognized access control model.