Which of the following is true regarding a secure access model?

A.
Secure information cannot flow to a more secure user.

B.
Secure information cannot flow to a less secure user.

C.
Secure information can flow to a less secure user.

D.
None of the choices.

Explanation:
Access restrictions such as access control lists and capabilities sometimes are not enough. In some
cases, information needs to be tightened further, sometimes by an authority higher than the owner
of the information. For example, the owner of a top-secret document in a government office might
deem the information available to many users, but his manager might know the information should
be restricted further than that. In this case, the flow of information needs to be controlled — secure
information cannot flow to a less secure user.