Access control questions almost always contain a cue that points to one model. Ownership decisions point to discretionary control. Classification labels and clearances point to mandatory control. Job duties point to role-based control. Conditions evaluated at request time, such as device posture or location, point to attribute-based control. Learn the cue, not just the definition.