ISC Exam Questions

With the BLP model, access permissions are defined through:

With the BLP model, access permissions are defined through:

A.
Filter rules

B.
Security labels

C.
Access Control matrix

D.
Profiles

Explanation:
Bell-LaPadula is a state machine model capturing confidentiality aspects of access control. Access
permissions are defined through an Access Control matrix and through a partial ordering of security
levels. Security policies prevent information flowing downwards from a high security level to a low
security level. BLP only considers the information flow that occurs when a subject observes or alters
an object.