What is the name of the first mathematical model of a multi-level security policy used to define the concept of a secure state, the modes of access, and rules for granting access?
Answer(s): D
TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.
Which of the following models does NOT include data integrity or conflict of interest?
Answer(s): C
Bell LaPadula model (Bell 1975): The granularity of objects and subjects is not predefined, but the model prescribes simple access rights. Based on simple access restrictions the Bell LaPadula model enforces a discretionary access control policy enhanced with mandatory rules. Applications with rigid confidentiality requirements and without strong integrity requirements may properly be modeled.These simple rights combined with the mandatory rules of the policy considerably restrict the spectrum of applications which can be appropriately modeled.
TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.Also check:Proceedings of the IFIP TC11 12th International Conference on Information Security, Samos (Greece), May 1996, On Security Models.
What is the PRIMARY use of a password?
The three classic ways of authenticating yourself to the computer security software are: something you know, something you have, and something:
An access system that grants users only those rights necessary for them to perform their work is operating on which security principle?
Answer(s): B
Post your Comments and Discuss ISC SSCP exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SSCP content, but please register or login to continue.