nerdexam
(ISC)2

CISSP-ISSMP · Question #89

Which of the following security models deal only with integrity? Each correct answer represents a complete solution. Choose two.

The correct answer is B. Clark-Wilson D. Biba. The Biba Integrity Model and the Clark-Wilson Integrity Model are both focused exclusively on data integrity. Biba enforces integrity through two rules: no read-down (subjects cannot read data at a lower integrity level) and no write-up (subjects cannot write to a higher integrit

Foundational Security Concepts

Question

Which of the following security models deal only with integrity? Each correct answer represents a complete solution. Choose two.

Options

  • ABiba-Wilson
  • BClark-Wilson
  • CBell-LaPadula
  • DBiba

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    90% (18)
  • C
    5% (1)

Explanation

The Biba Integrity Model and the Clark-Wilson Integrity Model are both focused exclusively on data integrity. Biba enforces integrity through two rules: no read-down (subjects cannot read data at a lower integrity level) and no write-up (subjects cannot write to a higher integrity level), preventing integrity from being contaminated. Clark-Wilson enforces integrity through well-formed transactions, separation of duties, and access controls between subjects and objects. Bell-LaPadula, by contrast, is a confidentiality model (no read-up, no write-down). 'Biba-Wilson' is a distractor and is not a recognized standard security model.

Topics

#Security Models#Integrity Models#Biba#Clark-Wilson

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSMP Practice