nerdexam
(ISC)2

SSCP · Question #188

What is the name of the first mathematical model of a multi-level security policy used to define the concept of a secure state, the modes of access, and rules for granting access?

The correct answer is D. Bell-LaPadula Model. The Bell-LaPadula Model was the first mathematical model of a multi-level security policy, primarily concerned with preventing unauthorized access to classified information.

Submitted by takeshi77· Apr 18, 2026Access Controls

Question

What is the name of the first mathematical model of a multi-level security policy used to define the concept of a secure state, the modes of access, and rules for granting access?

Options

  • AClark and Wilson Model
  • BHarrison-Ruzzo-Ullman Model
  • CRivest and Shamir Model
  • DBell-LaPadula Model

How the community answered

(63 responses)
  • A
    5% (3)
  • B
    6% (4)
  • C
    2% (1)
  • D
    87% (55)

Why each option

The Bell-LaPadula Model was the first mathematical model of a multi-level security policy, primarily concerned with preventing unauthorized access to classified information.

AClark and Wilson Model

The Clark and Wilson Model focuses on data integrity, which came after Bell-LaPadula.

BHarrison-Ruzzo-Ullman Model

The Harrison-Ruzzo-Ullman (HRU) Model is a general access control model that came later than Bell-LaPadula.

CRivest and Shamir Model

Rivest and Shamir are associated with the RSA algorithm for public-key cryptography, not with the first multi-level security model.

DBell-LaPadula ModelCorrect

The Bell-LaPadula Model, developed in the early 1970s, was indeed the first widely recognized mathematical model for multi-level security. It formally defined a "secure state," access modes (read/write), and rules (e.g., "no read up," "no write down") to enforce confidentiality in systems.

Concept tested: Historical security models (Bell-LaPadula)

Topics

#Security Models#Bell-LaPadula Model#Access Control Models#Confidentiality Models

Community Discussion

No community discussion yet for this question.

Full SSCP Practice