Which of the following file systems provides file-level security?

CDFS is a read-only file system designed for optical media and has no mechanism for defining user-based access permissions on files.

FAT supports only legacy file attributes (read-only, hidden, archive, system) and has no concept of per-user access control or security descriptors.

FAT32 extends FAT with support for larger partition sizes but retains the same attribute-only model with no ACL support, so any user with access to the volume can read or write any file.

NTFS uses a Discretionary Access Control List (DACL) model where administrators can assign read, write, execute, modify, and full control permissions on individual files and folders for specific users or groups. This access control is enforced by the Windows Security Reference Monitor at the kernel level, making it impossible for unprivileged users to bypass. NTFS also supports System Access Control Lists (SACLs) for auditing, and optional Encrypting File System (EFS) for data confidentiality.