SSCP Access Controls Practice Question
In a Bell-LaPadula model implementation, a user with a Secret clearance attempts to read a document classified as Top Secret. Additionally, they try to write to a document classified as Unclassified. What are the results of these actions?
⚠ Common exam trap
SSCP often tests the direction of Bell-LaPadula rules — the trap is mixing up 'no read up' and 'no write down' with Biba's integrity rules, leading candidates to incorrectly allow the write down.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Read denied, write denied
Under Bell-LaPadula, the Simple Security Property (no read up) denies a Secret-cleared user from reading a Top Secret document. The *-Property (no write down) denies the same user from writing to an Unclassified document. Therefore, both the read and the write are denied.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Read denied, write allowed
Why it's wrong here
Bell-LaPadula's *-property forbids writing down to a lower classification, so writing to Unclassified is denied, not allowed. The no-read-up rule correctly blocks the Top Secret read, which makes this pairing tempting, but the write half fails. Writing down would be permitted only under models lacking the *-property, such as Biba's integrity rules.
- ✗
Read allowed, write allowed
Why it's wrong here
The simple security property denies reading above one's clearance, so the Top Secret read cannot succeed. Allowing both reads and writes matches discretionary access models where clearance imposes no lattice constraint. Bell-LaPadula permits reading at or below Secret and writing at or above Secret, never this combination.
- ✓
Read denied, write denied
Why this is correct
Reading is blocked by the no-read-up property, since Secret clearance cannot access Top Secret data. Writing is blocked by the no-write-down property, which prevents a Secret subject from leaking information to an Unclassified object. Both Bell-LaPadula constraints are therefore satisfied, denying each action.
- ✗
Read allowed, write denied
Why it's wrong here
Bell-LaPadula's no-read-up rule denies the Secret user reading Top Secret, so the read is blocked; no-write-down permits writing to Unclassified, so the write succeeds. The option reverses both outcomes, which is tempting if you confuse the simple security property with the star property.
About these practice questions
Courseiva writes every SSCP question from scratch — 971 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SSCP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. In the Bell-LaPadula model, which property prevents a subject from reading an object at a higher classification level?
medium- A.The *-property (no write down)
- B.The Discretionary Security Property
- ✓ C.The Simple Security Property (no read up)
- D.The Lattice Security Property
Why C: The Simple Security Property (also called the no-read-up rule) in the Bell-LaPadula model states that a subject at a given security level cannot read an object at a higher classification level. This prevents unauthorized disclosure of classified information and is the foundational confidentiality rule of the model.
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.