CISSP® Certification Domain 3: Security Architecture and Engineering Video Boot Camp for 2022 - Security models and conc

Which access control model allows the owner of an object to decide who can access it?

• Mandatory Access Control (MAC)

• Discretionary Access Control (DAC)

• Role-Based Access Control (RBAC)

• Attribute-Based Access Control (ABAC)

What is the primary focus of the Bell-LaPadula model?

• Integrity

• Availability

• Usability

• Confidentiality

In the Biba model, what does the 'no write up' rule ensure?

• Subjects cannot read from higher integrity levels

• Subjects cannot write to higher integrity levels

• Subjects cannot read from lower integrity levels

• Subjects cannot write to lower integrity levels

Which model uses well-formed transactions to maintain data integrity?

• Clark-Wilson Model

• Harrison-Ruzzo-Ullman Model

• Brewer-Nash Model

• Graham-Denning Model

What is the main purpose of the Brewer-Nash model?

• To manage user roles

• To prevent conflicts of interest

• To ensure confidentiality

• To enforce data integrity

In the take-grant protection model, what does the 'grant' rule allow?

• A subject to take rights from another subject

• A subject to grant its rights to another subject

• A subject to create new objects

• A subject to remove rights from an object

What is a key feature of the noninterference model?

• It focuses on data availability

• It manages conflicts of interest

• It ensures actions at higher levels do not affect lower levels

• It allows subjects to grant permissions

Which security mode requires all users to have the same level of clearance for all data on the system?

• Multilevel Security Mode

• Compartmented Security Mode

• Dedicated Security Mode

• System High Security Mode

What distinguishes the multilevel security mode from other security modes?

• All users have access to all data

• Different clearance levels exist on the same system

• Users need formal access approval for all data

• All data is at the same sensitivity level

In which security mode do users need a valid need-to-know for accessing data?

• Compartmented Security Mode

• System High Security Mode

• Multilevel Security Mode

• Dedicated Security Mode