SSCP · Question #884
What does it mean to say that sensitivity labels are "incomparable"?
The correct answer is D. Neither label contains all the categories of the other. In lattice-based MAC models, one label 'dominates' another only if its classification is greater than or equal to AND its category set is a superset of the other label's category set. Labels are called 'incomparable' when neither dominates the other - specifically, when neither…
Question
What does it mean to say that sensitivity labels are "incomparable"?
Options
- AThe number of classification in the two labels is different.
- BNeither label contains all the classifications of the other.
- Cthe number of categories in the two labels are different.
- DNeither label contains all the categories of the other.
How the community answered
(29 responses)- A3% (1)
- B7% (2)
- C3% (1)
- D86% (25)
Explanation
In lattice-based MAC models, one label 'dominates' another only if its classification is greater than or equal to AND its category set is a superset of the other label's category set. Labels are called 'incomparable' when neither dominates the other - specifically, when neither label's category set fully contains the other's (e.g., Label A has categories {Alpha, Bravo} and Label B has {Bravo, Charlie}; A does not contain all of B's categories, and B does not contain all of A's). This incomparability means access cannot be determined by simple dominance, requiring explicit policy decisions. The number of classifications (A) or categories (C) being different is not the defining criterion.
Topics
Community Discussion
No community discussion yet for this question.