At an agency, a file carries a sensitivity label, and the system refuses a copy onto a lower label even after the file owner requests the copy. Which access model enforces the refusal?
Select an answer to reveal the explanation.
Short Explanation
A stamp on the folder stops the copy even when the owner asks nicely. You are looking at mandatory access control. The trap is calling the block owner discretion, a role name with no label check, or a log that only records the try.
Full Explanation
The right selection is "Mandatory access control, where the sensitivity label blocks the copy even when the owner asks". Mandatory control compares labels, and the system makes the decision even when the owner objects. The owner asked for a copy to a lower label and the system refused, which is a label rule the owner cannot override. The statement "Discretionary access control, where the file owner is free to override the sensitivity label anyway" would let the owner override the label, and this owner could not. The statement "Role names by themselves, with no label comparison between the file and the destination" would not compare the file label with the destination label, yet that comparison is what blocked the copy. The statement "Accounting records of the copy attempt, a log of the request that does not enforce the label" can show that the attempt happened, and a log entry does not itself allow or deny the copy. Exam caveat: job roles can exist beside labels, and the block in this scenario is the label comparison, not the role name. Operational check: in a test system, attempt a downgrade copy as the file owner and confirm the label policy denies it.