SSCP · Question #236
Which of the following is not one of the three goals of Integrity addressed by the Clark-Wilson model?
The correct answer is A. Prevention of the modification of information by unauthorized users. The Clark-Wilson integrity model was specifically designed to address how authorized users interact with data, targeting three goals: (1) preventing authorized users from making unauthorized or unintentional modifications, (2) preventing authorized users from making improper…
Question
Options
- APrevention of the modification of information by unauthorized users.
- BPrevention of the unauthorized or unintentional modification of information by authorized
- CPreservation of the internal and external consistency.
- DPrevention of the modification of information by authorized users.
How the community answered
(28 responses)- A93% (26)
- B4% (1)
- C4% (1)
Explanation
The Clark-Wilson integrity model was specifically designed to address how authorized users interact with data, targeting three goals: (1) preventing authorized users from making unauthorized or unintentional modifications, (2) preventing authorized users from making improper modifications through well-formed transactions, and (3) maintaining internal and external consistency. Preventing modification by unauthorized users (A) is a general access control goal addressed by models like Bell-LaPadula - it is NOT one of Clark-Wilson's specific three integrity goals. Clark-Wilson assumes access control handles unauthorized users and focuses on ensuring authorized users follow proper procedures.
Topics
Community Discussion
No community discussion yet for this question.