CISSP · Question #166
Refer to the information below to answer the question. In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, s
The correct answer is D. User D. The Bell-LaPadula model enforces the *-property (star property), which states a subject cannot write to an object at a lower sensitivity level than the subject's clearance, preventing data leakage downward.
Question
Refer to the information below to answer the question. In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files. In a Bell-LaPadula system, which user cannot write to File 3?
Options
- AUser A
- BUser B
- CUser C
- DUser D
How the community answered
(32 responses)- A3% (1)
- B6% (2)
- C9% (3)
- D81% (26)
Why each option
The Bell-LaPadula model enforces the *-property (star property), which states a subject cannot write to an object at a lower sensitivity level than the subject's clearance, preventing data leakage downward.
User A's clearance level is at or below File 3's classification, so the Bell-LaPadula write-down restriction does not apply, meaning User A is permitted to write to File 3.
User B's clearance level does not exceed File 3's sensitivity label in a way that triggers the no-write-down rule, so User B is not prohibited from writing to File 3 under Bell-LaPadula.
User C's clearance level is not higher than File 3's classification, so the *-property does not prevent User C from writing to File 3 in the Bell-LaPadula model.
In Bell-LaPadula, the *-property (no write-down rule) prohibits a subject from writing to any object whose sensitivity label is lower than the subject's clearance level. User D holds the highest clearance (top secret), and File 3 is classified at a lower sensitivity level, meaning User D cannot write down to File 3 without violating the confidentiality model's core principle of preventing information flow from higher to lower classifications.
Concept tested: Bell-LaPadula star property no-write-down rule
Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/cc722868(v=technet.10)
Topics
Community Discussion
No community discussion yet for this question.