A security architect is evaluating two models for a system that must prevent information flow from high to low. The system also requires that a high-integrity process not be corrupted by low-integrity data. Which pair of models should be combined to meet both requirements?

Bell-LaPadula for confidentiality and Biba for integrity

Bell-LaPadula for both confidentiality and integrity

Biba for both confidentiality and integrity

Biba for confidentiality and Bell-LaPadula for integrity

In a Bell-LaPadula system, a subject at the Secret level wants to write to an object at the Top Secret level. According to the *-property, what is the outcome?

Denied, because the subject's clearance is lower than the object's classification

Denied, because the subject cannot write to an object at a higher classification

Allowed only if the subject has been granted write access by the object's owner

Allowed, because writing up does not violate the *-property

A government agency is designing a system to handle classified information. They need to ensure that a user with a Secret clearance cannot read Top Secret documents, but can write to Top Secret documents. Which model and property combination achieves this?

Biba with only the simple integrity property

Bell-LaPadula with only the *-property

Bell-LaPadula with the simple security property and *-property

Biba with the simple integrity property and *-property

Certified Information Systems Security Professional

Domain 3Objective 2

3.2 - Understand the Fundamental Concepts of Security Models (e.g., Biba, Star Model, Bell-LaPadula) CISSP Practice Questions (Page 2)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 10 practice questions to prepare you well beyond it. (estimate)

10questions here

2free pages

3concepts

13%of the exam

Questions 6–10

6expert · hard
A security architect is evaluating two models for a system that must prevent information flow from high to low. The system also requires that a high-integrity process not be corrupted by low-integrity data. Which pair of models should be combined to meet both requirements?
Select an answer first
7application · medium
In a Bell-LaPadula system, a subject at the Secret level wants to write to an object at the Top Secret level. According to the *-property, what is the outcome?
Select an answer first
8application · medium
A government agency is designing a system to handle classified information. They need to ensure that a user with a Secret clearance cannot read Top Secret documents, but can write to Top Secret documents. Which model and property combination achieves this?
Select an answer first
9application · medium
A defense contractor operates a multilevel secure (MLS) system where documents are classified at Confidential, Secret, and Top Secret. A user cleared for Secret must be prevented from reading Top Secret documents, and a process at the Secret level must not be able to write data into the Confidential level. Which security model enforces both of these requirements?
Select an answer first
10foundation · easy
Which security model is primarily concerned with protecting the integrity of data and uses the properties 'no read down' and 'no write up'?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

3.2 - Understand the Fundamental Concepts of Security Models (e.g., Biba, Star Model, Bell-LaPadula) CISSP Practice Questions (Page 2)

Questions 6–10

A security architect is evaluating two models for a system that must prevent information flow from high to low. The system also requires that a high-integrity process not be corrupted by low-integrity data. Which pair of models should be combined to meet both requirements?

In a Bell-LaPadula system, a subject at the Secret level wants to write to an object at the Top Secret level. According to the *-property, what is the outcome?

A government agency is designing a system to handle classified information. They need to ensure that a user with a Secret clearance cannot read Top Secret documents, but can write to Top Secret documents. Which model and property combination achieves this?

Which security model is primarily concerned with protecting the integrity of data and uses the properties 'no read down' and 'no write up'?

Keep studying — Security Architecture and Engineering