MENU
Which of the following security models dictates that subjects can only access objects through applications?
Suggested Answer: B, D
Get Premium ISSMP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject.
The Clark-Wilson security model provides a foundation for specifying and analyzing an integrity policy for a computing system.
Answer option C is incorrect. The Bell-LaPadula access control model is mainly used in military systems.
Answer option A is incorrect. There is no such access control model as Clark-Biba.
38 comments · newest first
KI
Kirk
11 months ago
I thought Biba was about access too, but I guess not!
DO
Dominque
11 months ago
Yup, Clark-Wilson is the right answer!
TH
Theron
12 months ago
Wait, are we sure it's not Bell-LaPadula?
DO
Dominque
12 months ago
Totally agree, Clark-Wilson is all about applications.
JO
Joaquin
12 months ago
It's the Clark-Wilson model that does that!
JA
Janey
1 year ago
I have a vague recollection that the Clark-Wilson model was mentioned in a practice question about application controls. That might be the right choice here.
WI
Willard
1 year ago
The Biba model is about integrity, right? I feel like it doesn't relate to accessing objects through applications.
IR
Irene
1 year ago
I remember studying the Bell-LaPadula model, but I don't think it focuses on applications like this question suggests.
SH
Shalon
1 year ago
I think the answer might be the Clark-Wilson model since it emphasizes the use of applications for access control, but I'm not entirely sure.
DA
Dalene
1 year ago
I'm pretty sure the answer is A, Versions R77 and higher. The question specifically mentions the R81.20 management server, so it makes sense that it would support the latest versions of the gateways.
KI
Kiera
1 year ago
Okay, let me see here. The key is that the VMs are in a shared datacenter, so I'm guessing the most concerning attack would be one that could leverage that shared environment. I'm leaning towards side channel as the answer.
FR
Francesco
1 year ago
I've seen questions like this before. Definitely go with the PCA and feature removal approaches. That should help reduce the dimensionality and multicollinearity in the data, which should improve the model performance. Gotta love those data preprocessing steps!
MA
Mauricio
1 year ago
Okay, I think I've got a handle on this. The key is understanding how in-profile and above-CIR traffic is treated at ingress versus egress. I'll focus on that as I work through the options.
ST
Stacey
1 year ago
I'm just going to throw a dart at the options and hope for the best. Security models? More like security nightmares!
BE
Bette
1 year ago
C) Clark-Wilson
TI
Timothy
1 year ago
B) Bell-LaPadula
CA
Cammy
1 year ago
A) Biba-Clark model
BU
Bulah
1 year ago
Jokes on you, the answer is obviously the Biba model. It's like the Clark-Wilson model, but for hippies who want to 'biba' all day long.
YO
Yong
1 year ago
B) Bell-LaPadula
WI
Willetta
1 year ago
Haha, that's a good one!
MI
Mitzie
1 year ago
D) Biba model
EL
Eliseo
1 year ago
A) Biba-Clark model
DA
Daron
1 year ago
Aha! I remember learning about the Clark-Wilson model in class. It's all about ensuring integrity through controlled access, right?
SH
Shannan
1 year ago
So, the Biba-Clark model must be a combination of both Biba and Clark-Wilson principles.
MI
Mila
1 year ago
The Biba model, on the other hand, is all about integrity and preventing data corruption.
FR
Freida
1 year ago
I think the Bell-LaPadula model is more about confidentiality and preventing information leaks.
LE
Lera
1 year ago
Yes, you're right! The Clark-Wilson model focuses on integrity and controlled access.
JA
Jacqueline
1 year ago
So, the Biba-Clark model must be a combination of both integrity and controlled access.
ST
Stacey
1 year ago
The Biba model, on the other hand, is all about integrity and preventing information flow.
SH
Shad
1 year ago
I think the Bell-LaPadula model is more about confidentiality and preventing information flow.
BO
Bo
1 year ago
Yes, you're right! The Clark-Wilson model focuses on integrity and controlled access.
BE
Beatriz
1 year ago
Wait, isn't the Bell-LaPadula model the one that deals with confidentiality? I'm not sure about this one.
EL
Elroy
2 years ago
Hmm, this is a tricky one. I think the Clark-Wilson model is the answer, as it focuses on controlling access to sensitive data through applications.
LE
Lelia
1 year ago
Actually, I think it might be the Bell-LaPadula model, which also focuses on access control but in a different way.
ZO
Zona
1 year ago
I agree, the Clark-Wilson model is all about ensuring data integrity and access control through applications.
YA
Yan
2 years ago
I'm not sure, but I think C) Clark-Wilson could also be a possibility.
DA
Daren
2 years ago
I agree with Tarra, Bell-LaPadula makes sense for that.
TA
Tarra
2 years ago
I think the answer is B) Bell-LaPadula.