An organization is trying to decide which type of access control is most appropriate for the network. The current access control approach is too complex and requires significant overhead. Management w

Rule-based access control defines access based on a set of system-defined rules, which often adds complexity and does not inherently give individual users control over their own resource permissions.

Role-based access control (RBAC) assigns permissions to roles, and users inherit those permissions by being assigned to a role, which does not provide users with the direct ability to determine permissions on their specific files and directories.

Mandatory access control (MAC) strictly enforces system-wide access policies based on security labels and sensitivity levels, overriding user discretion, making it highly complex and directly contrary to empowering users to manage their own file permissions.

Discretionary Access Control (DAC) grants the owner of an object (like a file or directory) the ability to define and modify permissions for other users. This directly aligns with the requirement to give users the 'ability to determine what permissions should be applied to files, documents, and directories' and can simplify centralized overhead by delegating control to resource owners.