Which one of the following types of access control should be used when access to a resource is dependent upon specific qualities of the user…?

Which one of the following types of access control should be used when access to a resource is
dependent upon specific qualities of the user, for example, membership status, frequency of
purchases, or level of certification?

A.
role-based access control

B.
rule-based access control

C.
discretionary access control

D.
content-dependent access control

E.
attribute-based access control

Explanation:
Content dependent access control involves restricting access to content, such as
documents and emails, based on embedded keywords or certain assigned metadata. It
works by inspecting the content and applying rules to determine if access is permitted.
This approach is taken by many Data Loss Prevention solutions. It is possible to
combine content dependent access control with role-based access control in order to
restrict access to content by established roles.
Reference: Oracle Reference Architecture,Security, Release 3.1