ExamGecko
Search Search Login
Home Home / ISC / CISSP
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following are all elements of a disaster recovery plan (DRP)?
All of the following items should be included in a Business Impact Analysis (BIA) questionnaire EXCEPT questions that
Which of the following would BEST support effective testing of patch compatibility when patches are applied to an organization's systems?
In what phase of the System Development Life Cycle (SDLC) should security training for the development team begin?
An organization is preparing to achieve General Data Protection Regulation (GDPR) compliance. The Chief Information Security Officer (CISO) is reviewing data protection methods. Which of the following is the BEST data protection method?
Which part of an operating system (OS) is responsible for providing security interfaces among the hardware, OS, and other parts of the computing system?
What balance MUST be considered when web application developers determine how informative application error messages should be constructed?
Backup information that is critical to the organization is identified through a
Data remanence refers to which of the following?
With what frequency should monitoring of a control occur when implementing Information Security Continuous Monitoring (ISCM) solutions?

Question 1377 - CISSP discussion

Report
Export

Which of the following is a limitation of the Bell-LaPadula model?

A.
Segregation of duties (SoD) is difficult to implement as the "no read-up" rule limits the ability of an object to access information with a higher classification.
Answers
A.
Segregation of duties (SoD) is difficult to implement as the "no read-up" rule limits the ability of an object to access information with a higher classification.
B.
Mandatory access control (MAC) is enforced at all levels making discretionary access control (DAC) impossible to implement.
Answers
B.
Mandatory access control (MAC) is enforced at all levels making discretionary access control (DAC) impossible to implement.
C.
It contains no provision or policy for changing data access control and works well only with access systems that are static in nature.
Answers
C.
It contains no provision or policy for changing data access control and works well only with access systems that are static in nature.
D.
It prioritizes integrity over confidentiality which can lead to inadvertent information disclosure.
Answers
D.
It prioritizes integrity over confidentiality which can lead to inadvertent information disclosure.
Suggested answer: A
Show Answer
asked 18/09/2024
louishn vn
33 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms