answering is
Which access control type has a central authority that determine to what objects the subjects have access to
and it is based on role or on the organizational security policy?
A. Mandatory Access Control
B. Discretionary Access Control
C. Non-Discretionary Access Control
D. Rule-based Access control
