Free SSCP Exam Braindumps (page: 43)

Page 42 of 269

What does the (star) property mean in the Bell-LaPadula model?

  1. No write up
  2. No read up
  3. No write down
  4. No read down

Answer(s): C

Explanation:

The (star) property of the Bell-LaPadula access control model states that writing of information by a subject at a higher level of sensitivity to an object at a lower level of sensitivity is not permitted (no write down).


Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 5: Security Architectures and Models (page 202).
Also check out: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw- Hill/Osborne, 2002, Chapter 5: Security Models and Architecture (page 242, 243).



What does the (star) integrity axiom mean in the Biba model?

  1. No read up
  2. No write down
  3. No read down
  4. No write up

Answer(s): D

Explanation:

The (star) integrity axiom of the Biba access control model states that an object at one level of integrity is not permitted to modify an object of a higher level of integrity (no write up).


Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 5: Security Architectures and Models (page 205).



What does the simple integrity axiom mean in the Biba model?

  1. No write down
  2. No read down
  3. No read up
  4. No write up

Answer(s): B

Explanation:

The simple integrity axiom of the Biba access control model states that a subject at one level of integrity is not permitted to observe an object of a lower integrity (no read down).


Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 5: Security Architectures and Models (page 205).



What is the Biba security model concerned with?

  1. Confidentiality
  2. Reliability
  3. Availability
  4. Integrity

Answer(s): D

Explanation:

The Biba security model addresses the integrity of data being threatened when subjects at lower security levels are able to write to objects at higher security levels and when subjects can read data at lower levels.


Reference:

HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, Chapter 5: Security Models and Architecture (Page 244).






Post your Comments and Discuss ISC SSCP exam with other Community members:

SSCP Discussions & Posts