CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ120

Secure Software Concepts

Which of the following security models requires subjects to access objects only by using applications?

  • A Biba model
  • B Bell-LaPadula
  • C Clark-Wilson
  • D Biba-Clark model
Explanation

The Clark-Wilson integrity model restricts access to protected data through certified transformation procedures—applications that enforce authorized, well-formed transactions—rather than allowing subjects to access the objects directly.

Community Discussion

No comments yet. Be the first to start the discussion!