nerdexam
(ISC)2

CISSP · Question #166

Refer to the information below to answer the question. In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, s

The correct answer is D. User D. The Bell-LaPadula model enforces the *-property (star property), which states a subject cannot write to an object at a lower sensitivity level than the subject's clearance, preventing data leakage downward.

Submitted by hassan_iq· Mar 5, 2026Security Architecture and Engineering

Question

Refer to the information below to answer the question. In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files. In a Bell-LaPadula system, which user cannot write to File 3?

Options

  • AUser A
  • BUser B
  • CUser C
  • DUser D

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    9% (3)
  • D
    81% (26)

Why each option

The Bell-LaPadula model enforces the *-property (star property), which states a subject cannot write to an object at a lower sensitivity level than the subject's clearance, preventing data leakage downward.

AUser A

User A's clearance level is at or below File 3's classification, so the Bell-LaPadula write-down restriction does not apply, meaning User A is permitted to write to File 3.

BUser B

User B's clearance level does not exceed File 3's sensitivity label in a way that triggers the no-write-down rule, so User B is not prohibited from writing to File 3 under Bell-LaPadula.

CUser C

User C's clearance level is not higher than File 3's classification, so the *-property does not prevent User C from writing to File 3 in the Bell-LaPadula model.

DUser DCorrect

In Bell-LaPadula, the *-property (no write-down rule) prohibits a subject from writing to any object whose sensitivity label is lower than the subject's clearance level. User D holds the highest clearance (top secret), and File 3 is classified at a lower sensitivity level, meaning User D cannot write down to File 3 without violating the confidentiality model's core principle of preventing information flow from higher to lower classifications.

Concept tested: Bell-LaPadula star property no-write-down rule

Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/cc722868(v=technet.10)

Topics

#Bell-LaPadula model#star property#access control models#confidentiality model

Community Discussion

No community discussion yet for this question.

Full CISSP Practice