SSCP · Question #138
Which access control model achieves data integrity through well-formed transactions and separation of duties?
The correct answer is A. Clark-Wilson model. The Clark-Wilson model (1987) enforces data integrity through two key mechanisms: well-formed transactions (only specific, authorized programs called Transformation Procedures can modify Constrained Data Items, ensuring changes follow defined rules) and separation of duties (no…
Question
Which access control model achieves data integrity through well-formed transactions and separation of duties?
Options
- AClark-Wilson model
- BBiba model
- CNon-interference model
- DSutherland model
How the community answered
(49 responses)- A90% (44)
- B4% (2)
- C4% (2)
- D2% (1)
Explanation
The Clark-Wilson model (1987) enforces data integrity through two key mechanisms: well-formed transactions (only specific, authorized programs called Transformation Procedures can modify Constrained Data Items, ensuring changes follow defined rules) and separation of duties (no single user can complete a sensitive transaction alone). This makes it well-suited for commercial environments such as financial systems. Biba protects integrity through access restrictions, not transaction controls.
Topics
Community Discussion
No community discussion yet for this question.