The terms Transactions, Constrained Transactions, and Well-formed Transactions relate to which of the following security models?
Practise this CSSLP Secure Software Prep question free, then download the PDF, watch the video walkthrough, or unlock timed mock exams for the full web bank.
✓ Correct answer: C. Clark-WilsonAnswer: Clark-Wilson The Clark-Wilson security model emphasizes the concept of data integrity by defining Constrained Data Items (CDIs), and Unconstrained Data Items (UDIs). Transactions refer to processes that change the state of CDIs while ensuring compliance with integrity policies. Well-formed Transactions are sequences of operations that transition CDIs from one consistent state to another. Bell-LaPadula is a confidentiality protection model that combines attributes of Mandatory Access Control (MAC) and Discretionary Access Control (DAC). Its Simple Security Rule prevents reading data at a higher level of classification, while its * property prevents writing data to a system with a lower classification level. Biba is an integrity model designed to protect higher-level, more trustworthy data from being corrupted by lower-level data. Its no-write-up rule blocks systems from writing data to a system with a higher classification level. Its second rule states that a system reading/processing data from a lower-level system will have its integrity level lowered as a result. Brewer-Nash or the Chinese Wall is a confidentiality model for enterprises. It addresses the case where one group within an organization may have information that cannot be shared with another.
Keep practising. Use the free CSSLP Secure Software Prep PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.
Free practice here. Timed mocks when you are ready.
Study the CSSLP Secure Software Prep free question explanations, download the PDF, then unlock timed mock exams on the web when you want exam-day practice.
Theory