CompTIA: Advanced Security Practitioner (CASP) Exam Prep

Answer: C - The MAC access control model uses a subject and object label to grant/deny access.

Key Takeaway: The MAC access model uses a subject and object model. MAC uses labels to identify the level of sensitivity that applies to objects. When a user attempts to access an object, the label is examined to see if the access should take place or be denied. One key element to remember is that when mandatory control is applied, labels are required and must exist for every object.