Which concept indicates sensitivity and access levels of resources?

• A. RBAC
• B. Security Labels
• C. Need-to-Know Principle
• D. Compliance Standards

Answer: (B)

Security labels mark data with sensitivity levels and handling rules, providing a clear cue about how a resource should be treated and who may access it. By attaching labels such as Public, Internal, Confidential, or Restricted, the system can automatically enforce access controls, encryption requirements, and sharing restrictions based on the resource’s labeled sensitivity. This labeling travels with the data, ensuring consistent protection whether it’s stored, processed, or transmitted.

RBAC uses user roles to grant permissions, but it doesn’t itself indicate how sensitive a resource is. The need-to-know principle governs access based on whether a task requires it, rather than describing the resource’s level of sensitivity. Compliance standards cover external rules and processes, not the specific labeling that communicates resource sensitivity or drives access decisions.