Exam SY0-501 topic 1 question 711 discussion

This was on my exam (5 Aug 2020). I chose C by conviction, and A by faith. I don't know... Maybe C and E would make more sense. All I know is that I passed the exam so, these frustrating questions are no more my problem

Mandatory access control (MAC) is a security strategy that restricts the ability individual resource owners have to grant or deny access to resource objects in a file system. Only the administrator manages the access controls. Contrast with Discretionary Access Control (DAC) which is determined by the data owner. Rule-Based Access Control is a type of access control system that where access requests are evaluated against a specified list of rules. ( If X then Y.) Role-Based access control provides access based on a user's defined role in the organization.

I think C and E Attribute-based access control (ABAC) is the most fine-grained type of access control model. As the name suggests, an ABAC system is capable of making access decisions based on a combination of subject and object attributes plus any context-sensitive or system-wide attributes. As well as group/role memberships, these attributes could include information about the OS currently being used, the IP address, or the presence of up-to-date patches and anti-malware. An attribute-based system could monitor the number of events or alerts associated with a user account (in this case, if the web server application is compromised) or with a resource, or track access requests to ensure they are consistent in terms of timing of requests or geographic location. Conditional access is an example of rule-based access control. A conditional access system monitors account (in this case, service account) or device behavior throughout a session. If certain conditions are met (in this case, if the web server application is compromised), the account may be suspended (in this case, the application does not have access to other parts of the server or network).

https://en.wikipedia.org/wiki/Security-Enhanced_Linux From a purist perspective, SELinux provides a hybrid of concepts and capabilities drawn from mandatory access controls, mandatory integrity controls, role-based access control (RBAC), and type enforcement architecture.