ISC2 CSSLP Exam - Topic 4 Question 110 Discussion

Actual exam question for ISC2's CSSLP exam

Question #: 110
Topic #: 4

Fill in the blank with an appropriate phrase The is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity.

ABiba model

Show Suggested Answer

Suggested Answer: A

The Biba model is a formal state transition system of computer security policy that describes a set of access control rules

designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may

not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject.

by Leonora at Jan 22, 2026, 11:31 AM

Limited Time Offer

25%

Off

Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Juan

8 hours ago

I think the answer is "Bell-LaPadula model." It fits the description.

upvoted 0 times

...

Mattie

6 days ago

Sounds a bit outdated, though.

upvoted 0 times

...

Jesus

11 days ago

Yup, it focuses on confidentiality too!

upvoted 0 times

...

Jenifer

16 days ago

Wait, isn't there more to it than just access control rules?

upvoted 0 times

...

Verlene

2 months ago

Totally agree, it's essential for data integrity!

upvoted 0 times

...

Annabelle

2 months ago

It's called the Bell-LaPadula model.

upvoted 0 times

...

Antonio

2 months ago

Haha, Access Control Mechanism? What is this, amateur hour? It's clearly the Access Control Policy, duh.

upvoted 0 times

...

Alexis

3 months ago

Access Control Policy? Pfft, everyone knows it's the Access Control Mechanism. These exam questions are getting too easy.

upvoted 0 times

...

Rebeca

3 months ago

Access Control Policy? Really? I was thinking Access Control Mechanism. Guess I need to brush up on my security terminology.

upvoted 0 times

...

Gladys

3 months ago

Access Control Policy, for sure. It's the only one that makes sense in the context.

upvoted 0 times

...

Raina

3 months ago

That's a tough one, I'm going to go with Access Control Policy. Sounds like the right fit!

upvoted 0 times

...

Clay

3 months ago

Access Control Mechanism

upvoted 0 times

...

Anglea

3 months ago

Access Control Policy

upvoted 0 times

...

Quentin

4 months ago

Access Control Model

upvoted 0 times

...

Matthew

4 months ago

I’m leaning towards "access control policy," but I feel like there’s a specific term that fits better here.

upvoted 0 times

...

Tequila

4 months ago

This question seems familiar; I practiced one about state transition systems, but I can't recall the exact term.

upvoted 0 times

...

Beatriz

5 months ago

I remember studying access control models, and I feel like it could also be "Biba model," which focuses on integrity.

upvoted 0 times

...

Laine

5 months ago

I think the answer might be "Bell-LaPadula model," but I'm not entirely sure if that's the right one for data integrity.

upvoted 0 times

...

Tayna

5 months ago

I think I know the answer, but I'm not 100% sure. I'll write down my thoughts and reasoning, then double-check before submitting.

upvoted 0 times

...

Lai

5 months ago

No problem, I've got a good strategy for this. I'll start by listing out the key elements of a formal state transition system, then match that to the description provided in the question.

upvoted 0 times

...

Otis

5 months ago

Wait, I'm a bit confused. Is this asking about a specific security model or a general description of access control policies? I'll need to re-read the question carefully.

upvoted 0 times

...

Stephaine

6 months ago

Okay, I've got this. The answer is definitely "Bell-LaPadula model". It's a classic access control framework for ensuring data integrity.

upvoted 0 times

...

Kimberlie

6 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the key security concepts and how they relate to the question.

upvoted 0 times

...