Which of the following are variants of mandatory access control mechanisms?

Which of the following are variants of mandatory access control mechanisms? (Choose two.)

A.
Two factor authentication

B.
Acceptable use policy

C.
Username / password

D.
User education program

E.
Sign in register