What type of access control method is defined by rules enacted by system administrators rather than users?

Mandatory Access Control (MAC) is the correct answer because it is a type of access control method that enforces security policies dictated by the system or network administrator. In MAC, users cannot modify access permissions; instead, access decisions are based on the classification of information and the user's security clearance. This creates a highly regulated environment where rules are predetermined and enforced uniformly, ensuring that sensitive information is only accessible to authorized individuals based on their security levels.

In contrast, Role-Based Access Control (RBAC) assigns permissions based on the roles assigned to users, allowing for more flexibility within predefined roles but still largely influenced by administrators. Discretionary Access Control (DAC) empowers users to manage their own permissions, making it a less restrictive model where access can be easily modified by the data owners. Rule-Based Access Control is similar to MAC but more focused on specific rules that govern access, often providing flexibility that is not typical in a mandatory system. These distinctions highlight why Mandatory Access Control is characterized by strict, administrator-defined rules that govern access without user discretion.