Your CIO has found out that it is possible for an attacker to clone your company's RFID (Radio Frequency ID) based key cards. The CIO has tasked you with finding a way to ensure that anyone entering…

Mandatory Access Controls (MAC) is a data access policy model that enforces label-based permissions on information objects and subjects; it governs data confidentiality, not physical building entry authentication.

Bell-LaPadula is a formal confidentiality model governing read/write rules for classified data based on security labels; it has no relevance to physical access authentication or RFID card cloning.

Two-factor authentication (2FA) combines two distinct authentication categories - typically 'something you have' (the RFID card) with 'something you know' (a PIN) or 'something you are' (biometrics). Even if an attacker clones the RFID card, they cannot satisfy the second factor, so only genuine employees who possess both factors can gain entry.

TACACS (Terminal Access Controller Access Control System) is a network device authentication and authorization protocol used for managing administrative access to routers and switches, not for controlling physical building entry.