SSCP Access Controls Practice Question
Which access control model enforces security based on classification labels assigned to subjects and objects, commonly used for confidentiality?
⚠ Common exam trap
SSCP often tests the confusion between Bell-LaPadula (confidentiality, no read up/no write down) and Biba (integrity, no read down/no write up) — candidates who memorize only one direction of the rules pick the wrong model.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Bell-LaPadula
Bell-LaPadula is a mandatory access control (MAC) model designed for confidentiality. It enforces the 'no read up, no write down' rules: a subject cannot read an object at a higher classification level, and cannot write to an object at a lower level. This prevents unauthorized disclosure of classified information and is widely used in government and military systems.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Clark-Wilson
Why it's wrong here
Clark-Wilson enforces integrity through well-formed transactions and separation of duties, not classification labels governing read access. It is tempting because it is a recognised access control model, but it is the correct choice for commercial data integrity scenarios, not confidentiality label enforcement.
- ✗
Brewer-Nash
Why it's wrong here
Brewer-Nash (the Chinese Wall) dynamically restricts access based on a user's prior accesses to prevent conflicts of interest; it does not assign classification labels to subjects and objects. It is tempting as a confidentiality model, but it is correct for consultancy or financial conflict-of-interest scenarios.
- ✓
Bell-LaPadula
Why this is correct
Bell-LaPadula enforces confidentiality through mandatory access control, comparing classification labels on subjects and objects. Its no-read-up and no-write-down rules directly satisfy the stem's requirement for label-based enforcement, preventing lower-cleared subjects from accessing higher-classified data. This contrasts with integrity-focused models such as Biba, which reverse those rules.
- ✗
Biba
Why it's wrong here
Biba enforces integrity using hierarchical labels, preventing subjects from reading lower-integrity or writing higher-integrity data; it does not protect confidentiality. It is tempting because it uses labels like Bell-LaPadula, but it is the correct choice when the requirement is data integrity rather than secrecy.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 971 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.