Which of the following controls is described in the statement given below? "It ensures that the enforcement of organizational security policy does not rely on voluntary web application user…

Role-Based Access Control grants permissions based on a user's assigned role within an organization, not through sensitivity labels assigned to data.

Attribute-Based Access Control evaluates a combination of user, resource, and environmental attributes dynamically, which differs from label-based MAC enforcement.

Discretionary Access Control allows resource owners to set permissions at their own discretion, meaning enforcement does rely on user compliance, which is the opposite of what the statement describes.

MAC is a non-discretionary model where the operating system or security kernel enforces access decisions by comparing a resource's sensitivity label to the user's security clearance level. Because enforcement is centralized and policy-driven, it does not depend on voluntary user compliance. This matches the statement's description precisely, including the use of sensitivity labels.