The need to know is address by the use of labels.<br><br>Bell Lapadula was built to secure multilevel secure database. They were under Mandatory Access control.<br><br>The labels contain a security clearance (sensitivity) and also categories. The categories enforces the need to know.<br>
<br>So it is definitively wrong<br><br>Take care<br><br>Clement<br><br clear="all">Clément Dupuis, CD<br>CISSP, GCFW, GCIA, Security+, CEH, ECSA, LPT, CCSA, CCSE, MBNS, MBIS, MBHS, ACE<br>----------------------------------------------------------------------------------------------<br>
In real life:<br>Senior Security Specialist and Instructor<br>Security University<br>>> Call me to get the best CISSP training <<<br>----------------------------------------------------------------------------------------------<br>
In Cyberspace:<br>President/Security Evangelist/Chief Learning Officer (CLO)<br>The CCCure Family of Portals<br>----------------------------------------------------------------------------------------------<br>Business: 407 479 3903<br>
Fax: 407 264 8396 <br><br>Maintainer of :<br>The CISSP and SSCP Open Study Guides Web Site<br><a href="http://www.cccure.org">http://www.cccure.org</a> <br><br>The Professional Security Testers Warehouse<br><a href="http://www.professionalsecuritytesters.org">http://www.professionalsecuritytesters.org</a> <br>
<br>Knowledge sharing and giving back to the community<br>
<br><br><div class="gmail_quote">On Fri, Sep 4, 2009 at 09:32, Dallas, Michael J Civ USAF USAFE 100 CS/SCQ <span dir="ltr"><<a href="mailto:mike.dallas@mildenhall.af.mil">mike.dallas@mildenhall.af.mil</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div link="blue" vlink="purple" lang="EN-GB">
<div>
<p><span lang="EN-US">I received this question in a practice exam
provided by a recent ISC2 CBK review seminar. I was told the correct
answer is C, however I don’t agree with it as need-to-know would be an
important factor with this model. What do you all think? My guess on this
was D.</span></p>
<p style="margin-bottom: 6pt; line-height: normal;"><span style="font-size: 12pt; font-family: "Times New Roman","serif";" lang="EN-US">24.
What is one issue NOT addressed by the Bell-LaPadula model?</span></p>
<p style="margin-bottom: 6pt; line-height: normal;"><span style="font-size: 12pt; font-family: "Times New Roman","serif";" lang="EN-US"> (A)
Information flow control</span></p>
<p style="margin-bottom: 6pt; line-height: normal;"><span style="font-size: 12pt; font-family: "Times New Roman","serif";" lang="EN-US"> (B)
Security levels</span></p>
<p style="margin-bottom: 6pt; line-height: normal;"><span style="font-size: 12pt; font-family: "Times New Roman","serif";" lang="EN-US"> (C)
Need to Know</span></p>
<p style="margin-bottom: 6pt; line-height: normal;"><span style="font-size: 12pt; font-family: "Times New Roman","serif";" lang="EN-US"> (D)
Access modes</span></p>
<p><span lang="EN-US"> </span></p>
<p><span lang="EN-US">Thanks,</span></p>
<p><span lang="EN-US">Mike</span></p>
</div>
</div>
<br>_______________________________________________<br>
cisspstudy mailing list<br>
<a href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br>
<a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><br>
<br></blockquote></div><br>