Exam SSCP topic 1 question 135 discussion

Actual exam question from ISC's SSCP

Question #: 135
Topic #: 1

[All SSCP Questions]

Which of the following security models does NOT concern itself with the flow of data?

A. The information flow model
B. The Biba model
C. The Bell-LaPadula model
D. The noninterference model

Show Suggested Answer

Suggested Answer: D 🗳️
The goal of a noninterference model is to strictly separate differing security levels to assure that higher-level actions do not determine what lower-level users can see. This is in contrast to other security models that control information flows between differing levels of users, By maintaining strict separation of security levels, a noninterference model minimizes leakages that might happen through a covert channel.
The Bell-LaPadula model is incorrect. The Bell-LaPadula model is concerned with confidentiality and bases access control decsions on the classfication of objects and the clearences of subjects.
The information flow model is incorrect. The information flow models have a similar framework to the Bell-LaPadula model and control how information may flow between objects based on security classes.
The Biba model is incorrect. The Biba model is concerned with integrity and is a complement to the Bell-LaPadula model in that higher levels of integrity are more trusted than lower levels. Access control us based on these integrity levels to assure that read/write operations do not decrease an object's integrity.
References:

CBK, pp 325 - 326 -
AIO3, pp. 290 - 291

by xymavu at April 4, 2025, 10:56 p.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!