nerdexam
(ISC)2

CISSP · Question #167

Refer to the information below to answer the question. In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, s

The correct answer is A. User A. In Bell-LaPadula, the 'no write-down' (*-property) rule restricts users from writing to files at a lower sensitivity level than their clearance, meaning lower-cleared users have fewer files they can write to.

Submitted by kim_seoul· Mar 5, 2026Security Architecture and Engineering

Question

Refer to the information below to answer the question. In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files. In a Bell-LaPadula system, which user has the MOST restrictions when writing data to any of the four files?

Options

  • AUser A
  • BUser B
  • CUser C
  • DUser D

How the community answered

(50 responses)
  • A
    58% (29)
  • B
    6% (3)
  • C
    12% (6)
  • D
    24% (12)

Why each option

In Bell-LaPadula, the 'no write-down' (*-property) rule restricts users from writing to files at a lower sensitivity level than their clearance, meaning lower-cleared users have fewer files they can write to.

AUser ACorrect

In Bell-LaPadula, the *-property (star property) states a subject can only write to objects at or above their own sensitivity level (no write-down). User A, having the lowest clearance level (restricted), can only write to files classified at or above 'restricted,' but since all higher-classified files are also writable only if the user's clearance matches or is dominated by the file's label, a low-cleared user is most restricted because they cannot write down to lower files (there are none) and may not have sufficient clearance to write up to higher ones without domination constraints - effectively limiting them to the fewest writable files among all users.

BUser B

User B has a higher clearance than User A, meaning Bell-LaPadula's *-property allows them to write to a broader range of sensitivity levels, resulting in fewer restrictions on writing.

CUser C

User C's clearance is higher than User A's, granting write access to more files under Bell-LaPadula's no-write-down rule and therefore fewer overall writing restrictions.

DUser D

User D holds the highest or a higher clearance level compared to User A, which under Bell-LaPadula means they can write to the most files (at or above their level), making them the least restricted writer.

Concept tested: Bell-LaPadula star-property write restrictions MLS

Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/cc722488(v=technet.10)

Topics

#Bell-LaPadula model#star property#access control models#security model analysis

Community Discussion

No community discussion yet for this question.

Full CISSP Practice