CERTIFIED-IN-CYBERSECURITY · Question #761
The Bell and LaPadula access control model is a form of: ()
The correct answer is B. MAC. The Bell-LaPadula (BLP) model is a classic Mandatory Access Control (MAC) model developed in the 1970s for the U.S. Department of Defense. In MAC, access decisions are enforced by the system based on security labels (classifications like Top Secret, Secret, Unclassified)…
Question
The Bell and LaPadula access control model is a form of: ()
Options
- ADAC
- BMAC
- CABAC
- DRBAC
How the community answered
(48 responses)- A2% (1)
- B94% (45)
- D4% (2)
Explanation
The Bell-LaPadula (BLP) model is a classic Mandatory Access Control (MAC) model developed in the 1970s for the U.S. Department of Defense. In MAC, access decisions are enforced by the system based on security labels (classifications like Top Secret, Secret, Unclassified) assigned to both subjects and objects - users cannot change these labels. BLP enforces two key rules: the Simple Security Property ('no read up') and the Star Property ('no write down'), preserving confidentiality. DAC (A) lets data owners set permissions; RBAC (D) assigns permissions via roles; ABAC (C) uses attribute-based policies. None of these describe the BLP label-driven enforcement model.
Topics
Community Discussion
No community discussion yet for this question.