nerdexam
(ISC)2

CSSLP · Question #112

Which of the following security models characterizes the rights of each subject with respect to every object in the computer system?

The correct answer is D. Access matrix. An access matrix is a fundamental security model that precisely defines the access rights (e.g., read, write, execute) of each subject (user/process) over every object (file/resource) within a computer system. It explicitly maps permissions between subjects and objects.

Secure Software Concepts

Question

Which of the following security models characterizes the rights of each subject with respect to every object in the computer system?

Options

  • AClark-Wilson model
  • BBell-LaPadula model
  • CBiba model
  • DAccess matrix

How the community answered

(32 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    94% (30)

Why each option

An access matrix is a fundamental security model that precisely defines the access rights (e.g., read, write, execute) of each subject (user/process) over every object (file/resource) within a computer system. It explicitly maps permissions between subjects and objects.

AClark-Wilson model

The Clark-Wilson model is an integrity model focused on commercial applications, emphasizing well-formed transactions and separation of duties to maintain data integrity, not directly characterizing subject-object rights for all system objects.

BBell-LaPadula model

The Bell-LaPadula model is a confidentiality-focused model that prevents unauthorized information flow from higher security levels to lower ones (no read up, no write down), but it's not a general model for characterizing all subject-object rights.

CBiba model

The Biba model is an integrity-focused model that prevents information flow from lower integrity levels to higher ones (no read down, no write up), complementing Bell-LaPadula, but it's also not a general model for all subject-object rights.

DAccess matrixCorrect

An access matrix is a conceptual security model that explicitly defines the permissions or rights that each subject (e.g., user, process) has with respect to every object (e.g., file, printer, memory segment) in a computer system. It is a fundamental representation of discretionary access control, where each entry [Subject, Object] in the matrix specifies the authorized operations.

Concept tested: Access control models - Access matrix

Source: https://csrc.nist.gov/glossary/term/access-matrix

Topics

#Access Control#Security Models#Access Matrix#Authorization

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice