Question $2(2\mathrm{.}0)$: Assume you are the Chief Security O$$icer of a hospital. The hospital has security policies regarding how its employees, such as doctors, will have access to patient records. The hospital uses attribute$-$based access control $($ABAC$).$ You have developed an algorithm for the authorization engine of ABAC for doctors$$ access rights to patients$$ records in the hospital. $($a$)$ Identify two attributes for each ABAC component: a subject, an object, and an environment of the hospital system so that the ABAC engine can verify whether the hospital$$s access control policy is satisfactory for the subject when it wants to access an object. You can choose any subject, object, and environment relevant to a hospital $(1\mathrm{.}0)[$Ch$5$: Authentication$]($b$)$ Provide a policy or a rule as an example using some of the attributes you proposed in section $5($a$)$ for the ABAC engine to assess. You must use all three components. $(1\mathrm{.}0)[$Ch$7$: Privacy