SSCP · Question #95
Which of the following statements pertaining to the Bell-LaPadula is TRUE if you are NOT making use of the strong star property?
The correct answer is D. It allows "write up.". The Bell-LaPadula model enforces confidentiality with two core properties: (1) Simple Security Property - 'no read up' (a subject cannot read data at a higher classification level), and (2) Star (*) Property - 'no write down' (a subject cannot write data to a lower…
Question
Which of the following statements pertaining to the Bell-LaPadula is TRUE if you are NOT making use of the strong star property?
Options
- AIt allows "read up."
- BIt addresses covert channels.
- CIt addresses management of access controls.
- DIt allows "write up."
How the community answered
(21 responses)- A5% (1)
- B10% (2)
- D86% (18)
Explanation
The Bell-LaPadula model enforces confidentiality with two core properties: (1) Simple Security Property - 'no read up' (a subject cannot read data at a higher classification level), and (2) Star (*) Property - 'no write down' (a subject cannot write data to a lower classification level). The Strong Star Property additionally restricts writes to only the subject's exact level (no write up or down). Without the strong star property, the standard star property still permits writing to the same or higher levels - so 'write up' is allowed. Covert channels and management of access controls are not addressed by Bell-LaPadula.
Topics
Community Discussion
No community discussion yet for this question.