SSCP · Question #98
Which of the following security models does NOT concern itself with the flow of data?
The correct answer is D. The noninterference model. The noninterference model is concerned with whether actions performed at one security level can be observed or inferred by subjects at another security level - it focuses on isolation and interference between domains, not on the directional flow of data. In contrast, the…
Question
Options
- AThe information flow model
- BThe Biba model
- CThe Bell-LaPadula model
- DThe noninterference model
How the community answered
(37 responses)- A5% (2)
- C3% (1)
- D92% (34)
Explanation
The noninterference model is concerned with whether actions performed at one security level can be observed or inferred by subjects at another security level - it focuses on isolation and interference between domains, not on the directional flow of data. In contrast, the Bell-LaPadula and Biba models explicitly govern information flow (read/write rules based on classification levels), and the information flow model directly tracks how data moves between security states. Noninterference asks: 'Can high-level actions affect what low-level users see?' rather than 'Where does data flow?'
Topics
Community Discussion
No community discussion yet for this question.