A systems administrator is configuring a system that uses data classification labels. Which of the following will the administrator need to implement to enforce access control?

Discretionary access control (DAC) allows resource owners to determine and modify permissions for their resources, which does not directly enforce access based on system-wide data classification labels.

Mandatory access control (MAC) is a security model where the operating system or security kernel strictly enforces access decisions based on comparing sensitivity labels of objects (like data classification labels) with security clearances of subjects. This model ensures that access is granted only if the subject's clearance meets the object's classification, and it prevents subjects from altering their access rights or those of other subjects.

Role-based access control (RBAC) grants access permissions based on a user's job function or role within an organization, not primarily on the intrinsic classification labels of the data itself.

Rule-based access control is a broad category, but Mandatory Access Control (MAC) is the specific model that directly dictates access based on system-assigned classification labels, unlike the more general concept.