SSCP Access Controls Practice Question
A healthcare organization uses a mandatory access control (MAC) system to protect patient records. A nurse with a Secret clearance attempts to access a file classified as Top Secret. According to the Bell-LaPadula model, what will happen?
⚠ Common exam trap
It's easy for candidates to confuse need to know with clearance level, assuming that a legitimate need to know can override the mandatory no-read-up rule.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The access will be denied because the nurse's clearance is lower than the file's classification.
The Bell-LaPadula model is a mandatory access control model designed to protect confidentiality. Its no-read-up property states that a subject cannot read an object with a higher classification than the subject's clearance. Therefore, a nurse with Secret clearance cannot read a Top Secret file. The other options either misunderstand the need-to-know principle, incorrectly assume that an NDA or temporary upgrade can bypass the rule, or misstate the model's behavior.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The access will be allowed but the nurse will be required to sign an additional non-disclosure agreement.
Why it's wrong here
Signing an NDA does not override the mandatory access control rules. The Bell-LaPadula model strictly prohibits reading up regardless of additional agreements. The system enforces the clearance and classification labels automatically, so the access would be denied.
- ✓
The access will be denied because the nurse's clearance is lower than the file's classification.
Why this is correct
The Bell-LaPadula model enforces the no-read-up property: a subject cannot read an object with a higher sensitivity level. Since the nurse has Secret clearance and the file is Top Secret, the read is denied. This prevents unauthorized disclosure of classified information and is a core rule of MAC.
- ✗
The access will be denied because the nurse does not have Top Secret clearance, but the nurse can request a temporary upgrade.
Why it's wrong here
While the access is denied due to insufficient clearance, Bell-LaPadula does not include a mechanism for temporary clearance upgrades within the model. Clearance changes are administrative and outside the model's access decision. The model simply denies the read; it does not offer an upgrade path.
- ✗
The access will be allowed because the nurse has a legitimate need to know for patient care.
Why it's wrong here
Need to know is necessary but not sufficient in MAC. Even with a legitimate need, the clearance level must dominate the object's classification. The Bell-LaPadula model does not permit read-up based on need to know alone; the mandatory label takes precedence.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
One of 971 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.