What is called a type of access control where a central authority determines what subjects can have access to certain objects, based on the
organizational security policy?
A. Mandatory Access Control
B. Discretionary Access Control
C. Non-discretionary Access Control
D. Rule-based access control