A security administrator, who is working for a government organization, would like to utilize classification and
granular planning to secure top secret data and grant access on a need-to-know basis. Which of the following
access control schemas should the administrator consider?


A. Mandatory
B. Rule-based
C. Discretionary
D. Role-based