<Li> Mandatory Access Control (MAC) In MAC, users do not have much freedom to determine who has access to their files . For example, security clearance of users and classification of data (as confidential, secret or top secret) are used as security labels to define the level of trust . </Li> <Li> Organization - Based Access control (OrBAC) OrBAC model allows the policy designer to define a security policy independently of the implementation </Li> <Li> Role - Based Access Control (RBAC) RBAC allows access based on the job title . RBAC largely eliminates discretion when providing access to objects . For example, a human resources specialist should not have permissions to create network accounts; this should be a role reserved for network administrators . </Li> <Li> Rule - Based Access Control (RAC) RAC method is largely context based . Example of this would be only allowing students to use the labs during a certain time of day . </Li>

Which of the following is a type of mac (mandatory access control)