A company wants to limit an employee's access to a production environment. Which of the following access control practices is the best to implement?

Mandatory Access Control (MAC) is a highly restrictive model, often found in high-security environments, where access is dictated by security labels, which can be overly complex for standard enterprise production environments.

Time-based access control restricts access during certain hours or days but does not define what resources can be accessed or what actions can be performed, which is critical for limiting access to a production environment.

Attribute-based access control (ABAC) defines access based on a combination of user, resource, and environment attributes, which is powerful but generally more complex to implement and manage than RBAC for standard use cases.

Role-based access control (RBAC) is the best practice for limiting access because it assigns permissions and privileges to users based on their specific job functions or roles within an organization, ensuring employees only have access necessary for their tasks. This approach simplifies management and enforces the principle of least privilege in environments like production.