Henry is the security architect of a research and development organization. Resources are available to users and groups depending on the users' security clearance. All resources are labeled with a specific classification. Henry is told that each user must hold a clearance at or above the classification level of the resource to access it$.$ Given these factors and requirements, what access control model would be most appropriate?

Question $27$Select one:

A$.$

Role$-$based access control $($RBAC$)$

B$.$

Multifactor authentication

C$.$

Mandatory access control $($MAC$)$

D$.$

Discretionary access control $($DAC$)$