[CCCure CISSP] Fwd: Question on Biba security model

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

[CCCure CISSP] Fwd: Question on Biba security model

Rajitha Udayanga
Hi

In the Quiz engine there is a question as follows.
Which of the following statements relating to the Biba security model is
FALSE?
a) It is a state machine model.
  b) A subject is not allowed to write up.
  c) Integrity levels are assigned to subjects and objects.
d) Programs serve as an intermediate layer between subjects and objects.

  i have an understanding that Biba based on Multilevel Lattice model so
that i have choose the answer a where the correct answer is Answer d.
Also in the CBK Pg 688 (2nd Edition) also said same thing.

Pls clarify. Rajitha



_______________________________________________
You can find the list archive at:
http://cissp-study.3965.n7.nabble.com/

CISSPstudy mailing list
[hidden email]

To UNSUBSCRIBE, SUBSCRIBE, or MANAGE your accout visit the link below:
http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
Reply | Threaded
Open this post in threaded view
|

Re: [CCCure CISSP] Fwd: Question on Biba security model

worawit steanputtanagul

Hi,
   As I known, in Biba model,  between subject and object is rule, not program or any layer.

Regard,
Worawit

On Apr 17, 2013 9:22 PM, "Rajitha Udayanga" <[hidden email]> wrote:
Hi

In the Quiz engine there is a question as follows.
Which of the following statements relating to the Biba security model is FALSE?
a) It is a state machine model.
 b) A subject is not allowed to write up.
 c) Integrity levels are assigned to subjects and objects.
d) Programs serve as an intermediate layer between subjects and objects.

 i have an understanding that Biba based on Multilevel Lattice model so that i have choose the answer a where the correct answer is Answer d. Also in the CBK Pg 688 (2nd Edition) also said same thing.

Pls clarify. Rajitha



_______________________________________________
You can find the list archive at:
http://cissp-study.3965.n7.nabble.com/

CISSPstudy mailing list
[hidden email]

To UNSUBSCRIBE, SUBSCRIBE, or MANAGE your accout visit the link below:
http://cccure.org/mailman/listinfo/cisspstudy_cccure.org

_______________________________________________
You can find the list archive at:
http://cissp-study.3965.n7.nabble.com/

CISSPstudy mailing list
[hidden email]

To UNSUBSCRIBE, SUBSCRIBE, or MANAGE your accout visit the link below:
http://cccure.org/mailman/listinfo/cisspstudy_cccure.org