Which of the following is a model that uses a predefined set of access privileges for an object of the system?

MAC enforces access policies by assigning security labels or classifications to both subjects (users and processes) and objects (files and resources), with the operating system or security kernel making all access decisions based on those predefined labels. Individual users have no ability to modify or delegate access permissions, ensuring strict, centrally managed control over information flow. This model is standard in high-security environments such as government and military systems where data classification is mandatory.

Discretionary Access Control (DAC) allows the resource owner to set and modify access permissions at their own discretion, meaning access is not predefined by the system but controlled by individual users.

Policy Access Control (PAC) is not a recognized or standardized access control model in established security frameworks or major IT certification curricula.

Role-Based Access Control (RBAC) grants permissions based on a user's assigned organizational role rather than system-enforced security labels on the objects themselves.