PrepAway - Latest Free Exam Questions & Answers

Which access control model was proposed for enforcing a…

Which access control model was proposed for enforcing access control in government and military
applications?

PrepAway - Latest Free Exam Questions & Answers

A.
Bell-LaPadula model

B.
Biba model

C.
Sutherland model

D.
Brewer-Nash model

Explanation:
The Bell–LaPadula Model (abbreviated BLP) is a state machine model used for enforcing access control in
government and military applications. It was developed by David Elliott Bell and Leonard J. LaPadula,
subsequent to strong guidance from Roger R. Schell to formalize the U.S. Department of Defense (DoD)
multilevel security (MLS) policy. The model is a formal state transition model of computer security policy that
describes a set of access control rules which use security labels on objects and clearances for subjects.
Security labels range from the most sensitive (e.g., “Top Secret”), down to the least sensitive (e.g.,
“Unclassified” or “Public”).
Incorrect Answers:
B: The Biba Model describes a set of access control rules designed to ensure data integrity. It is not used for
enforcing access control in government and military applications.
C: The Sutherland model is an information flow model. It is not used for enforcing access control in government
and military applications.
D: The Brewer and Nash Model deals with conflict of interest. It is not used for enforcing access control in
government and military applications.

https://en.wikipedia.org/wiki/Bell–LaPadula_model


Leave a Reply