The correct option is Role Based Access Control RBAC.

In the college scenario learners are granted access to course materials based on the classes they are registered in and that is a direct mapping to roles. Under RBAC permissions are assigned to roles and users gain those permissions by being assigned the matching role, which matches the idea of a student role for a class.

Mandatory Access Control MAC is incorrect because MAC enforces access based on system labels and classification levels rather than on user membership in classes or roles, and it is typically used in high assurance environments rather than course enrollment scenarios.

Cloud Identity and Access Management is incorrect because that term refers to cloud vendor services for managing identities and permissions and not to a specific access control model. The scenario is about how access decisions are made and not about a particular cloud provider feature.

Attribute Based Access Control ABAC is incorrect because ABAC evaluates attributes of users, resources, and the environment to make decisions. While ABAC can express complex rules, the described situation is most naturally represented by role membership through class registration which is the hallmark of RBAC.

Full AWS Practitioner Certification Question