A user has attempted to access data at a higher classification level than the user's account is currency authorized to access. Which of the following access control models has been applied to this…

Mandatory Access Control (MAC) is a policy-driven model where access is determined by comparing a subject's security clearance level against an object's classification label (e.g., Unclassified, Secret, Top Secret). A central authority assigns these labels, and users cannot override them - if a user's clearance does not meet or exceed the data's classification level, access is denied. This scenario, where a user is blocked from data at a higher classification level than their authorization, is the defining characteristic of MAC.

Discretionary Access Control (DAC) allows resource owners to grant or restrict access at their own discretion, and does not use system-enforced classification levels to control access.

Role-Based Access Control (RBAC) grants access based on a user's assigned role within an organization, not based on data classification labels or security clearance levels.

Attribute-Based Access Control (ABAC) makes access decisions based on a combination of user, resource, and environmental attributes, which is more flexible and dynamic than the rigid classification-level enforcement described in MAC.