CIAM Access Control Models 2

Question 1

Which access control model uses security labels and clearance levels to enforce a 'no read up, no write down' policy?

Accepted Answer

Bell-LaPadula Model

Answer

Bell-LaPadula enforces confidentiality by preventing subjects from reading data at higher classifications (no read up) and writing to lower classifications (no write down).

Question 2

In the Biba Integrity Model, the 'no write up' property means that a subject:

Accepted Answer

Cannot write to objects at a higher integrity level

Answer

In Biba, subjects cannot write to objects at higher integrity levels to prevent corrupting trusted data with less-trusted data.

Question 3

Which property of the Clark-Wilson model requires that all data modifications be performed by authorized programs called Transformation Procedures (TPs)?

Accepted Answer

Enforcement Rule 2 (E2)

Answer

E2 in Clark-Wilson requires that only certified TPs may manipulate Constrained Data Items (CDIs), ensuring integrity through controlled transformation.

Question 4

An organization needs fine-grained access control based on user department, time of day, and resource sensitivity. Which model best fits this requirement?

Accepted Answer

Attribute-Based Access Control (ABAC)

Answer

ABAC evaluates multiple attributes (user, environment, resource) simultaneously, making it ideal for complex, fine-grained policy requirements.

Question 5

In a DAC system, who ultimately controls access to a resource?

Accepted Answer

The resource owner

Answer

In DAC, the owner of a resource has discretion to grant or revoke access to other users, unlike MAC where the system enforces access centrally.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Access Control Models 2