CompTIA Security+ (SY0-501) — Question 795

A user has attempted to access data at a higher classification level than the user's account is currently authorized to access. Which of the following access control models has been applied to this user's account?

Answer options

• A. MAC
• B. DAC
• C. RBAC
• D. ABAC

Correct answer: A

Explanation

The correct answer is MAC (Mandatory Access Control) because it enforces strict policies that prevent users from accessing data classified at higher levels than their clearance. The other options, such as DAC (Discretionary Access Control), RBAC (Role-Based Access Control), and ABAC (Attribute-Based Access Control), do not inherently restrict access based on classification levels in the same way that MAC does.