CISSP Practice Question – Security Models and Assurance

An enterprise is developing a new system that must enforce strict isolation between processes while allowing shared read access to certain reference data. The system will handle data at multiple classification levels, and unauthorized modification or influence between processes must be prevented.

Which security model BEST meets these requirements?

A. Bell–LaPadula Model

B. Biba Integrity Model

C. Clark–Wilson Model

D. Lattice-Based Access Control

12 comments