Discuss ISC2 ISSMP Exam Topic 4 Question 32

Which of the following access control models are used in the commercial sector?

Each correct answer represents a complete solution. Choose two.

AClark-Biba model

BClark-Wilson model

CBell-LaPadula model

DBiba model

Suggested Answer: B, D

The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject.

The Clark-Wilson security model provides a foundation for specifying and analyzing an integrity policy for a computing system.

Answer option C is incorrect. The Bell-LaPadula access control model is mainly used in military systems.

Answer option A is incorrect. There is no such access control model as Clark-Biba.

Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

11 comments · newest first

Corrinne 11 months ago

Agreed, Clark-Wilson is a solid choice!

Lonna 12 months ago

Wait, are we sure about Clark-Biba? Seems off.

Ernest 12 months ago

Biba model is also relevant in some sectors.

Ronnie 12 months ago

I think the Bell-LaPadula model is more for government, right?

Sheridan 1 year ago

Definitely the Clark-Wilson model is used in business.

Herminia 1 year ago

I recall the Clark-Biba model being mentioned, but I don't think it's widely used in the commercial sector like the Clark-Wilson model is.

Lavonda 1 year ago

I practiced a similar question, and I feel like the Clark-Wilson model and the Biba model could be the right choices, but I’m a bit confused.

Sanjuana 1 year ago

I'm not so sure about the Bell-LaPadula model; I remember it being more about confidentiality, which might not be as relevant in the commercial sector.

Danica 1 year ago

I think the Clark-Wilson model is definitely one of the answers since it focuses on integrity in commercial systems.

Helene 1 year ago

I'm a bit conflicted here. On one hand, the promoter's past issues are worrying. But I also don't want to automatically discount Glowing without a fair assessment. Gotta keep an open mind while being thorough.

Bethanie 1 year ago

I'm a bit confused here. Why would an error occur when using an alias in the ORDER BY? I'll have to think this through step-by-step.

ISC2 ISSMP Exam - Topic 4 Question 32 Discussion