SSCP Access Controls Practice Question
A security administrator is configuring a new system and wants to enforce a mandatory access control model to ensure confidentiality of classified data. Which access control model should the administrator implement?
⚠ Common exam trap
SSCP often tests the confusion between Bell-LaPadula (confidentiality, no read up/no write down) and Biba (integrity, no read down/no write up) — candidates swap the two models.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Bell-LaPadula
Bell-LaPadula is the mandatory access control model designed to enforce confidentiality using the 'no read up, no write down' rules (simple security property and *-property). It assigns security labels to subjects and objects and prevents lower-cleared subjects from reading higher-classified data, directly meeting the requirement to protect classified information.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Discretionary Access Control (DAC)
Why it's wrong here
DAC lets resource owners set permissions at their discretion, so it cannot enforce the system-wide, label-based rules a mandatory model demands for classified data. It tempts because DAC is the default on most operating systems and is easy to deploy, but it suits environments needing owner-controlled sharing, not strict confidentiality.
- ✗
Biba
Why it's wrong here
Biba enforces integrity through no-read-down and no-write-up rules, protecting data from contamination rather than enforcing the confidentiality labels a mandatory model needs. It tempts because Biba is a genuine mandatory model, so it appears to fit, but its axis is integrity; Bell-LaPadula addresses confidentiality.
- ✗
Role-Based Access Control (RBAC)
Why it's wrong here
RBAC grants access through assigned roles rather than the data sensitivity labels and clearance levels a mandatory model requires, so it cannot guarantee confidentiality of classified data. It tempts because RBAC scales well for job-function permissions in enterprises, but it is non-discretionary, not mandatory, and does not enforce information-flow rules.
- ✓
Bell-LaPadula
Why this is correct
Bell-LaPadula enforces mandatory access control through no read up and no write down, preventing subjects from reading data above their clearance or leaking it to lower levels. This directly preserves confidentiality of classified data, unlike integrity-focused models such as Biba.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 971 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.