nerdexam
(ISC)2

CSSLP · Question #120

Which of the following security issues does the Bell-La Padula model focus on?

The correct answer is B. Confidentiality. The Bell-LaPadula model is a security model primarily focused on enforcing confidentiality in computer systems.

Secure Software Concepts

Question

Which of the following security issues does the Bell-La Padula model focus on?

Options

  • AAuthorization
  • BConfidentiality
  • CIntegrity
  • DAuthentication

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    91% (43)
  • C
    4% (2)
  • D
    2% (1)

Why each option

The Bell-LaPadula model is a security model primarily focused on enforcing confidentiality in computer systems.

AAuthorization

Authorization is a general concept of defining access rights; while Bell-LaPadula implements a form of authorization for confidentiality, it is not the primary focus of the model.

BConfidentialityCorrect

The Bell-LaPadula model is explicitly designed to enforce confidentiality, using rules like 'no read down' (Simple Security Property) and 'no write up' (*-Property) to prevent subjects from accessing information at a higher security level or writing information to a lower security level. This ensures that sensitive information remains protected from unauthorized disclosure within multi-level security systems.

CIntegrity

The Bell-LaPadula model does not directly address integrity; the Biba model is designed to maintain integrity by preventing unauthorized modification of information.

DAuthentication

Authentication is the process of verifying a user's identity, which is a prerequisite for access control but separate from how information access is controlled based on security levels in Bell-LaPadula.

Concept tested: Bell-LaPadula model focus

Topics

#Bell-La Padula model#Confidentiality#Access control models#Security models

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice