CISSP · Question #167
Refer to the information below to answer the question. In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, s
The correct answer is A. User A. In Bell-LaPadula, the 'no write-down' (*-property) rule restricts users from writing to files at a lower sensitivity level than their clearance, meaning lower-cleared users have fewer files they can write to.
Question
Options
- AUser A
- BUser B
- CUser C
- DUser D
How the community answered
(50 responses)- A58% (29)
- B6% (3)
- C12% (6)
- D24% (12)
Why each option
In Bell-LaPadula, the 'no write-down' (*-property) rule restricts users from writing to files at a lower sensitivity level than their clearance, meaning lower-cleared users have fewer files they can write to.
In Bell-LaPadula, the *-property (star property) states a subject can only write to objects at or above their own sensitivity level (no write-down). User A, having the lowest clearance level (restricted), can only write to files classified at or above 'restricted,' but since all higher-classified files are also writable only if the user's clearance matches or is dominated by the file's label, a low-cleared user is most restricted because they cannot write down to lower files (there are none) and may not have sufficient clearance to write up to higher ones without domination constraints - effectively limiting them to the fewest writable files among all users.
User B has a higher clearance than User A, meaning Bell-LaPadula's *-property allows them to write to a broader range of sensitivity levels, resulting in fewer restrictions on writing.
User C's clearance is higher than User A's, granting write access to more files under Bell-LaPadula's no-write-down rule and therefore fewer overall writing restrictions.
User D holds the highest or a higher clearance level compared to User A, which under Bell-LaPadula means they can write to the most files (at or above their level), making them the least restricted writer.
Concept tested: Bell-LaPadula star-property write restrictions MLS
Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/cc722488(v=technet.10)
Topics
Community Discussion
No community discussion yet for this question.