QuestionQ69Verified/Security Architecture and EngineeringCopy linkReport a problemAsk AstroTutorSave questionWhich of the following represents a limitation of the Bell–LaPadula model?ASegregation of duties (SoD) is difficult to implement as the "no read-up" rule limits the ability of an object to access information with a higher classification.BMandatory access control (MAC) is enforced at all levels making discretionary access control (DAC) impossible to implement.CIt contains no provision or policy for changing data access control and works well only with access systems that are static in nature.DIt prioritizes integrity over confidentiality which can lead to inadvertent information disclosure.Show AnswerAnswerExplanationThe Bell–LaPadula model is designed to preserve confidentiality through mandatory security classifications and rules such as no read up and no write down. It does not provide a policy for changing access controls dynamically, making it best suited to relatively static access-control environments.Show comments6Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion