ISC2 ISSMP Exam - Topic 4 Question 32 Discussion

Actual exam question for ISC2's ISSMP exam

Question #: 32
Topic #: 4

[All ISSMP Questions]

Which of the following access control models are used in the commercial sector?

Each correct answer represents a complete solution. Choose two.

AClark-Biba model

BClark-Wilson model

CBell-LaPadula model

DBiba model

Show Suggested Answer

Suggested Answer: B, D

The Biba model is a formal state transition system of computer security policy that describes a set of access control rules designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject.

The Clark-Wilson security model provides a foundation for specifying and analyzing an integrity policy for a computing system.

Answer option C is incorrect. The Bell-LaPadula access control model is mainly used in military systems.

Answer option A is incorrect. There is no such access control model as Clark-Biba.

by Rodolfo at May 06, 2022, 01:39 PM

Limited Time Offer

25%

Off

Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Corrinne

4 months ago

Agreed, Clark-Wilson is a solid choice!

upvoted 0 times

...

Lonna

4 months ago

Wait, are we sure about Clark-Biba? Seems off.

upvoted 0 times

...

Ernest

4 months ago

Biba model is also relevant in some sectors.

upvoted 0 times

...

Ronnie

4 months ago

I think the Bell-LaPadula model is more for government, right?

upvoted 0 times

...

Sheridan

5 months ago

Definitely the Clark-Wilson model is used in business.

upvoted 0 times

...

Herminia

5 months ago

I recall the Clark-Biba model being mentioned, but I don't think it's widely used in the commercial sector like the Clark-Wilson model is.

upvoted 0 times

...

Lavonda

5 months ago

I practiced a similar question, and I feel like the Clark-Wilson model and the Biba model could be the right choices, but I’m a bit confused.

upvoted 0 times

...

Sanjuana

5 months ago

I'm not so sure about the Bell-LaPadula model; I remember it being more about confidentiality, which might not be as relevant in the commercial sector.

upvoted 0 times

...

Danica

5 months ago

I think the Clark-Wilson model is definitely one of the answers since it focuses on integrity in commercial systems.

upvoted 0 times

...

Helene

5 months ago

I'm a bit conflicted here. On one hand, the promoter's past issues are worrying. But I also don't want to automatically discount Glowing without a fair assessment. Gotta keep an open mind while being thorough.

upvoted 0 times

...

Bethanie

5 months ago

I'm a bit confused here. Why would an error occur when using an alias in the ORDER BY? I'll have to think this through step-by-step.

upvoted 0 times

...