Exam CISSP topic 1 question 451 discussion

Confidentiality = Bell La Padula. Clark-Wilson model is used in financial and accounting data: Clark–Wilson uses three-part relationship of subject/program or transaction/object known as a triple or an access control triplet. Sarbanes-Oxley (SOX) Act of 2002 to help protect investors from fraudulent financial reporting by corporations. SOX = STOP FINANCIAL FRAUD. Chinese Wall Model aka Brewer Nash is used to avoid conflict of interest. Chinese wall aka Brewer Nash uses unique groups contained in unique conflict classes. Integrity = Biba model.

Bell-LaPadula → Confidentiality Biba → Integrity Clark-Wilson → segregation of duties Brewer-Nash → conflict of interest

Answer: C. Bell-LaPadula model All models explained: https://sprinto.com/blog/types-of-security-models/#:~:text=The%20Brewer%20and%20Nash%20model,because%20of%20personal%20interest%20conflict.

C. Bell-LaPadula model. The Bell-LaPadula model is a security model that specifically addresses confidentiality and access control. It enforces the "no read up, no write down" principle, which means that users are only allowed to read information at their security level or lower (no read up) and write information at their security level or higher (no write down). This model is well-suited for scenarios where maintaining strict confidentiality and access controls are critical, such as in government and military environments.

C. Bell-LaPadula model. The Bell-LaPadula model is a security model that specifically addresses confidentiality and access control. It enforces the "no read up, no write down" principle, which means that users are only allowed to read information at their security level or lower (no read up) and write information at their security level or higher (no write down). This model is well-suited for scenarios where maintaining strict confidentiality and access controls are critical, such as in government and military environments.