A large multinational company uses a cloud$-$based document storage system. The system provides access to documents by considering a combination of factors: the user's department, geographic location, the document's sensitivity level, and the current date and time. What access control technique evaluates a set of attributes that each subject possesses to determine if access should be granted?

A$.$Discretionary access control

B$.$Rule$-$based access controls

C$.$Attribute$-$based access control

D$.$Role$-$based access control