CISSP-ISSMP Question #214: Real Exam Question with Answer & Explanation

The correct answer is B: Clark-Wilson model. The Biba and Clark-Wilson access control models are used in the commercial sector. The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ord

Foundational Security Concepts

Question

Which of the following access control models are used in the commercial sector? Each correct answer represents a complete solution. Choose two.

Options

AClark-Biba model
BClark-Wilson model
CBell-LaPadula model
DBiba model

Explanation

The Biba and Clark-Wilson access control models are used in the commercial sector. The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject. The Clark-Wilson security model provides a foundation for specifying and analyzing an integrity policy for a computing system. Answer option C is incorrect. The Bell-LaPadula access control model is mainly used in military Answer option A is incorrect. There is no such access control model as Clark-Biba.

Topics

#Access Control Models#Integrity Models#Commercial Security

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSMP Practice Browse All CISSP-ISSMP Questions