<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceName"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hi Clement,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> I got this from Shon Harris 4<sup>th</sup>
Edition <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> “The Bell-LaPadula model focuses on
ensuring that subjects are properly authenticated-by having the necessary
security clearance, need to know, and formal access approval-before accessing
an object”<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>This means need to know is one of the
important factor for this model. Could you please clarify this?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Thanks<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Jegan<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
cisspstudy-bounces@cccure.org [mailto:cisspstudy-bounces@cccure.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Clement Dupuis<br>
<b><span style='font-weight:bold'>Sent:</span></b> Friday, September 04, 2009
9:27 PM<br>
<b><span style='font-weight:bold'>To:</span></b> The CISSP Study Mailing list<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [Cisspstudy]
Bell-LaPadula Question?</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>The need to know is
address by the use of labels.<br>
<br>
Bell Lapadula was built to secure multilevel secure database. They were
under Mandatory Access control.<br>
<br>
The labels contain a security clearance (sensitivity) and also
categories. The categories enforces the need to know.<br>
<br>
So it is definitively wrong<br>
<br>
Take care<br>
<br>
Clement<br>
<br clear=all>
Clément Dupuis, CD<br>
CISSP, GCFW, GCIA, Security+, CEH, ECSA, LPT, CCSA, CCSE, MBNS, MBIS, MBHS,
ACE<br>
----------------------------------------------------------------------------------------------<br>
In real life:<br>
Senior Security Specialist and Instructor<br>
<st1:place w:st="on"><st1:PlaceName w:st="on">Security</st1:PlaceName> <st1:PlaceType
w:st="on">University</st1:PlaceType></st1:place><br>
>> Call me to get the best CISSP training <<<br>
----------------------------------------------------------------------------------------------<br>
In Cyberspace:<br>
President/Security Evangelist/Chief Learning Officer (CLO)<br>
The CCCure Family of Portals<br>
----------------------------------------------------------------------------------------------<br>
Business: 407 479 3903<br>
Fax: 407 264 8396 <br>
<br>
Maintainer of :<br>
The CISSP and SSCP Open Study Guides Web Site<br>
<a href="http://www.cccure.org">http://www.cccure.org</a> <br>
<br>
The Professional Security Testers Warehouse<br>
<a href="http://www.professionalsecuritytesters.org">http://www.professionalsecuritytesters.org</a>
<br>
<br>
Knowledge sharing and giving back to the community<br>
<br>
<o:p></o:p></span></font></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>On Fri, Sep 4, 2009 at 09:32, <st1:City w:st="on"><st1:place w:st="on">Dallas</st1:place></st1:City>,
Michael J Civ USAF USAFE 100 CS/SCQ <<a
href="mailto:mike.dallas@mildenhall.af.mil">mike.dallas@mildenhall.af.mil</a>>
wrote:<o:p></o:p></span></font></p>
<div link=blue vlink=purple>
<div>
<p><font size=3 face="Times New Roman"><span style='font-size:12.0pt'>I
received this question in a practice exam provided by a recent ISC2 CBK review
seminar. I was told the correct answer is C, however I don’t agree with
it as need-to-know would be an important factor with this model. What do
you all think? My guess on this was D.</span></font><span lang=EN-GB><o:p></o:p></span></p>
<p style='margin-bottom:6.0pt'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>24. What is one issue NOT addressed by the
Bell-LaPadula model?</span></font><span lang=EN-GB><o:p></o:p></span></p>
<p style='margin-bottom:6.0pt'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>
(A) Information flow control</span></font><span lang=EN-GB><o:p></o:p></span></p>
<p style='margin-bottom:6.0pt'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>
(B) Security levels</span></font><span lang=EN-GB><o:p></o:p></span></p>
<p style='margin-bottom:6.0pt'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>
(C) Need to Know</span></font><span lang=EN-GB><o:p></o:p></span></p>
<p style='margin-bottom:6.0pt'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>
(D) Access modes</span></font><span lang=EN-GB><o:p></o:p></span></p>
<p><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font><span
lang=EN-GB><o:p></o:p></span></p>
<p><font size=3 face="Times New Roman"><span style='font-size:12.0pt'>Thanks,</span></font><span
lang=EN-GB><o:p></o:p></span></p>
<p><font size=3 face="Times New Roman"><span style='font-size:12.0pt'>Mike</span></font><span
lang=EN-GB><o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'><br>
_______________________________________________<br>
cisspstudy mailing list<br>
<a href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br>
<a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org"
target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>