Henry works as a Windows security professional for the U$.$S$.$ military. Resources are available to users depending on each user's security clearance. All resources are labeled with a specific classification. Henry is told that each user must hold a clearance at or above the classification level of the resource to access it$.$ Given these factors and requirements, what access control model would be most appropriate?