CSSLP · Question #120
Which of the following security issues does the Bell-La Padula model focus on?
The correct answer is B. Confidentiality. The Bell-LaPadula model is a security model primarily focused on enforcing confidentiality in computer systems.
Question
Which of the following security issues does the Bell-La Padula model focus on?
Options
- AAuthorization
- BConfidentiality
- CIntegrity
- DAuthentication
How the community answered
(47 responses)- A2% (1)
- B91% (43)
- C4% (2)
- D2% (1)
Why each option
The Bell-LaPadula model is a security model primarily focused on enforcing confidentiality in computer systems.
Authorization is a general concept of defining access rights; while Bell-LaPadula implements a form of authorization for confidentiality, it is not the primary focus of the model.
The Bell-LaPadula model is explicitly designed to enforce confidentiality, using rules like 'no read down' (Simple Security Property) and 'no write up' (*-Property) to prevent subjects from accessing information at a higher security level or writing information to a lower security level. This ensures that sensitive information remains protected from unauthorized disclosure within multi-level security systems.
The Bell-LaPadula model does not directly address integrity; the Biba model is designed to maintain integrity by preventing unauthorized modification of information.
Authentication is the process of verifying a user's identity, which is a prerequisite for access control but separate from how information access is controlled based on security levels in Bell-LaPadula.
Concept tested: Bell-LaPadula model focus
Topics
Community Discussion
No community discussion yet for this question.