B. Attribute-based access control (ABAC) uses subject, object, and environmental attributes to make an access decision.