Problem Statement
Which access control model enforces restrictions based on data classification labels and user clearances?
Explanation
Mandatory Access Control (MAC) uses system-enforced labels: every resource has sensitivity labels (e.g., Top-Secret) and every user has a clearance level. The system enforces access decisions—not the user. In contrast, DAC lets users decide access, and RBAC uses roles rather than labels. Recognising these models shows interviewers you understand how organisations implement access restriction in secure environments.
