CompTIA Security+ (SY0-501) — Question 265

A systems administrator is configuring a system that uses data classification labels.
Which of the following will the administrator need to implement to enforce access control?

Answer options

• A. Discretionary access control
• B. Mandatory access control
• C. Role-based access control
• D. Rule-based access control

Correct answer: B

Explanation

The correct answer is B, as Mandatory Access Control (MAC) is designed to enforce access based on data classification levels. The other options, such as Discretionary Access Control (DAC) and Role-based Access Control (RBAC), do not enforce access restrictions based on classification labels in the same stringent way as MAC.