A system uses Bell-LaPadula. A subject at Secret level needs to read an object at Top Secret level to perform a task. The security administrator must allow this without violating the model. What is the most appropriate action?

Reclassify the object to Secret

Use a trusted subject that is allowed to bypass the simple security property

Allow the read because the subject has a need-to-know

Grant the subject a temporary Top Secret clearance

A security architect is designing a system that must prevent both confidentiality leaks (high to low) and integrity corruption (low to high). The architect decides to implement both Bell-LaPadula and Biba. Which of the following is a known challenge when combining these two models?

The models are redundant and provide the same protections

The models require different classification schemes that cannot coexist

The models are incompatible and cannot be implemented together

The models have conflicting properties for read and write operations

A military system uses Bell-LaPadula. A user at the Secret level attempts to write a document to a Top Secret file. What is the result?

Denied, because the user cannot read the Top Secret file

Denied, because the user cannot write to a higher classification

Allowed, because the *-property permits write up

Allowed, because the user has a need-to-know

A system uses the Bell-LaPadula model. A subject cleared for SECRET is reading a TOP SECRET document. Which Bell-LaPadula property does this action violate?

Discretionary security property

Simple security property (no read up)

Certified Information Systems Security Professional

Domain 3Objective 2

3.2 - Understand the Fundamental Concepts of Security Models (e.g., Biba, Star Model, Bell-LaPadula) CISSP Practice Questions (Page 1)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 10 practice questions to prepare you well beyond it. (estimate)

10questions here

2free pages

3concepts

13%of the exam

Questions 1–5

1expert · hard
A system uses Bell-LaPadula. A subject at Secret level needs to read an object at Top Secret level to perform a task. The security administrator must allow this without violating the model. What is the most appropriate action?
Select an answer first
2expert · hard
A security architect is designing a system that must prevent both confidentiality leaks (high to low) and integrity corruption (low to high). The architect decides to implement both Bell-LaPadula and Biba. Which of the following is a known challenge when combining these two models?
Select an answer first
3application · medium
A military system uses Bell-LaPadula. A user at the Secret level attempts to write a document to a Top Secret file. What is the result?
Select an answer first
4application · medium
A security administrator is configuring a system that must prevent a user with a Secret clearance from reading Top Secret documents. Which property of the Bell-LaPadula model enforces this?
Select an answer first
5foundation · easy
A system uses the Bell-LaPadula model. A subject cleared for SECRET is reading a TOP SECRET document. Which Bell-LaPadula property does this action violate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.