A security technician is working with the network firewall team to implement access controls at the company's demarc as part of the initiation of configuration management processes. One of the…

Rule-based access control (RuBAC) grants or denies access based on a set of predefined rules that apply to all subjects uniformly, regardless of identity or role. A firewall's access control lists (ACLs) consist of ordered rules that match traffic attributes such as IP address, port, and protocol, then permit or deny accordingly. This matches the RuBAC model precisely, as the rules are not tied to user identity or role but to traffic characteristics.

Role-based access control assigns permissions based on a user's organizational role, which requires identity awareness that a stateless packet-filtering firewall does not provide.

Discretionary access control allows resource owners to define permissions at their own discretion and is associated with file system permissions, not network firewall rule sets.

Mandatory access control uses security labels and clearance levels enforced by the operating system, which is a host-level model unrelated to how firewall ACLs operate.