Which of the following is true regarding a secure access model?

A.
Secure information cannot flow to a more secure user.

B.
Secure information cannot flow to a less secure user.

C.
Secure information can flow to a less secure user.

D.
None of the choices.

Explanation:
Access restrictions such as access control lists and capabilities sometimes are not
enough. In some cases, information needs to be tightened further, sometimes by an
authority higher than the owner of the information. For example, the owner of a
top-secret document in a government office might deem the information available to many
users, but his manager might know the information should be restricted further than
that. In this case, the flow of information needs to be controlled — secure
information cannot flow to a less secure user.