Question

A large multinational company uses a cloud-based document storage system. The system provides access to documents by considering a combination of factors: the user's department, geographic location, the document's sensitivity level, and the current date and time. What access control technique evaluates a set of attributes that each subject possesses to determine if access should be granted?

A.Discretionary access control
B.Rule-based access controls
C.Attribute-based access control
D.Role-based access control