CSSLP · Question #285
Which of the following security models focuses on data confidentiality and controlled access to classified information?
The correct answer is D. Bell-La Padula model. The Bell-La Padula model is a state machine security model primarily designed to enforce confidentiality, particularly in military and government settings with classified information.
Question
Which of the following security models focuses on data confidentiality and controlled access to classified information?
Options
- AClark-Wilson model
- BBiba model
- CTake-Grant model
- DBell-La Padula model
How the community answered
(17 responses)- B6% (1)
- D94% (16)
Why each option
The Bell-La Padula model is a state machine security model primarily designed to enforce confidentiality, particularly in military and government settings with classified information.
The Clark-Wilson model focuses on data integrity, using well-formed transactions and separation of duties to prevent unauthorized modification.
The Biba model focuses on data integrity, preventing subjects from writing data to higher integrity levels or reading data from lower integrity levels (no read up, no write down).
The Take-Grant model is a lattice-based model used to analyze access rights propagation in a system, not primarily focused on confidentiality or integrity policies for classified data.
The Bell-La Padula (BLP) model is a state machine model that enforces confidentiality policies. It uses subjects (users) and objects (data) with security labels (e.g., Unclassified, Confidential, Secret) and enforces 'no read down' and 'no write up' rules, primarily designed for military systems to protect classified information.
Concept tested: Security models - Confidentiality (Bell-La Padula)
Source: https://learn.microsoft.com/en-us/security/benchmark/azure/baselines/security-control-access-control#bell-la-padula-model
Topics
Community Discussion
No community discussion yet for this question.