Which one of the following access control models associates every resource and every user of a
resource with one of an ordered set of classes?

A.
Take-Grant model

B.
Biba model

C.
Lattice model

D.
Clark-Wilson model

Explanation:
With a lattice model you first have to define a set of security classes that can be
assigned to users or objects…After you have defined set of security classes, you define a set flow
operations showing when information can flow from one class to another – Roberta Bragg Cissp
Certification Training Guide (que) pg 23