nerdexam
(ISC)2

SSCP · Question #884

What does it mean to say that sensitivity labels are "incomparable"?

The correct answer is D. Neither label contains all the categories of the other. In lattice-based MAC models, one label 'dominates' another only if its classification is greater than or equal to AND its category set is a superset of the other label's category set. Labels are called 'incomparable' when neither dominates the other - specifically, when neither…

Submitted by emma.c· Apr 18, 2026Access Controls

Question

What does it mean to say that sensitivity labels are "incomparable"?

Options

  • AThe number of classification in the two labels is different.
  • BNeither label contains all the classifications of the other.
  • Cthe number of categories in the two labels are different.
  • DNeither label contains all the categories of the other.

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    7% (2)
  • C
    3% (1)
  • D
    86% (25)

Explanation

In lattice-based MAC models, one label 'dominates' another only if its classification is greater than or equal to AND its category set is a superset of the other label's category set. Labels are called 'incomparable' when neither dominates the other - specifically, when neither label's category set fully contains the other's (e.g., Label A has categories {Alpha, Bravo} and Label B has {Bravo, Charlie}; A does not contain all of B's categories, and B does not contain all of A's). This incomparability means access cannot be determined by simple dominance, requiring explicit policy decisions. The number of classifications (A) or categories (C) being different is not the defining criterion.

Topics

#Sensitivity Labels#Access Control Models#Information Classification#Multi-level Security

Community Discussion

No community discussion yet for this question.

Full SSCP Practice