MENU
Which of the following statements about the availability concept of Information security management is true?
Suggested Answer: B, D
Get Premium ISSMP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject.
The Clark-Wilson security model provides a foundation for specifying and analyzing an integrity policy for a computing system.
Answer option C is incorrect. The Bell-LaPadula access control model is mainly used in military systems.
Answer option A is incorrect. There is no such access control model as Clark-Biba.
39 comments · newest first
KI
Kirk
10 months ago
Wait, is D really a thing? Sounds confusing!
JA
Jamey
11 months ago
Totally agree with B, reliability is crucial!
MA
Maia
11 months ago
A is way too narrow, it’s about the whole system.
BR
Brittni
11 months ago
I’m not so sure about C, sounds off.
KI
Kimbery
11 months ago
B is definitely true, access is key!
CA
Caitlin
12 months ago
D sounds familiar, but I think it relates more to integrity rather than availability. I might go with B after all.
FR
Francisca
12 months ago
I feel like A is definitely wrong since it talks about individual actions, which doesn't really fit the concept of availability.
JU
Julio
12 months ago
I'm not entirely sure, but I remember something about availability being linked to uptime and access, which makes me lean towards B as well.
SO
Sonia
1 year ago
I think availability is about making sure we can access resources when we need them, so maybe B is the right choice?
FR
Freeman
1 year ago
Availability is all about making sure authorized users can access the resources they need when they need them. Based on that, I'm pretty confident option B is the correct answer here. I'll mark that one down.
VA
Val
1 year ago
Okay, let's see. Availability is about ensuring resources are accessible when needed, so I think option B is the best answer here. I'll go with that unless I can come up with a better understanding.
SH
Sharee
1 year ago
Hmm, I'm a bit unsure about this one. The availability concept seems to be about ensuring reliable and timely access to resources, but I'm not sure if that's the only correct statement. I'll have to think this through carefully.
TE
Tesha
1 year ago
This looks like a straightforward question on the availability concept in information security. I think I've got a good handle on this, so I'll go with option B.
LE
Leslee
1 year ago
I'm a little confused by this question. The options seem to be talking about different security concepts like confidentiality and integrity, not just availability. I'll have to review my notes to make sure I understand the nuances of each concept before answering.
KR
Kristin
1 year ago
Hmm, this is a trickier one. I'm a bit confused about why Data Loader wouldn't work for a custom object. Isn't that one of the main use cases? And the profile access thing seems like it could be a red herring. I'll need to really think through the logic here and not jump to conclusions. Gotta be careful on these exam questions.
SH
Sherrell
1 year ago
Okay, I've got this! Ad-hoc Testing is the right answer. It's the type of testing that's done spontaneously during Exploratory Testing, without any formal test cases or documentation.
LA
Laura
1 year ago
Hmm, I'm a bit unsure about this one. There are a lot of options, and I want to make sure I choose the right ones. I'll need to think it through carefully.
HA
Haley
1 year ago
I'm just going to choose C and hope the exam grader has a sense of humor. After all, unauthorized modifications by authorized personnel is just called 'Monday'.
EL
Elin
1 year ago
User 3: I'm just going to choose C and hope for the best.
CH
Christiane
1 year ago
User 2: I'm going with D, unauthorized modifications by unauthorized personnel sounds serious.
MA
Mammie
1 year ago
User 1: I think B is the correct answer.
DE
Denna
1 year ago
Easy peasy, B is the correct answer. Availability is like having the key to the castle, you gotta be able to get in when you need to!
JA
Jame
1 year ago
I'm not sure, but I think C) It ensures that unauthorized modifications are not made to data by authorized personnel or processes, could also be correct.
CA
Candida
1 year ago
I agree with Linsey, because availability is all about making sure resources are accessible when needed.
AI
Ailene
1 year ago
Hmm, I was about to choose C, but then I remembered that's more about integrity. B is the way to go, it's all about keeping the resources accessible.
JE
Jean
1 year ago
I agree, it's all about ensuring reliable and timely access to resources.
DO
Donette
1 year ago
I agree, it's all about ensuring reliable and timely access to resources.
PO
Polly
1 year ago
I think B is the correct option.
BR
Brett
1 year ago
I think B is the correct option.
LI
Linsey
1 year ago
I think the answer is B) It ensures reliable and timely access to resources.
GE
Gearldine
1 year ago
I'm torn between B and D, but I think D makes more sense. Availability is about preventing unauthorized modifications, not authorized ones.
CA
Cammy
2 years ago
I'm not sure, but I think C) It ensures that unauthorized modifications are not made to data by authorized personnel or processes could also be correct.
ME
Melvin
2 years ago
B) Ensuring reliable and timely access to resources is the essence of availability in information security. This is a no-brainer!
JU
Justine
1 year ago
D) It ensures that modifications are not made to data by unauthorized personnel or processes.
QU
Quentin
1 year ago
C) It ensures that unauthorized modifications are not made to data by authorized personnel or processes.
JO
Joanna
1 year ago
B) It ensures reliable and timely access to resources.
WI
Willard
1 year ago
A) It determines actions and behaviors of a single individual within a system.
RI
Rickie
2 years ago
I agree with Stefan, because availability is all about making sure the resources are accessible when needed.
ST
Stefan
2 years ago
I think the answer is B) It ensures reliable and timely access to resources.