CISSP · Free practice question 3 of 12
Brewer-Nash model prevents conflicts of interest
Ellery Advisory, a consulting firm, serves several competing airlines. Once a consultant has accessed one airline's confidential data, the system must stop that consultant from accessing data belonging to any rival airline. Which security model fits this requirement?
- A.Brewer-Nash
- B.Clark-Wilson
- C.Biba
- D.Bell-LaPadula
Show answer and explanation
Correct answer: A. Brewer-Nash
Why: The Brewer-Nash, or Chinese Wall, model changes a subject's permissions dynamically based on what it has already accessed, so after a consultant works with one company's data, the data of companies in the same conflict-of-interest class becomes off-limits. Biba and Clark-Wilson focus on integrity, and Bell-LaPadula enforces fixed confidentiality levels rather than history-based conflict rules.
More free CISSP questions
- Senior management ultimate security accountability
- Wassenaar Arrangement export of cryptography
- Known-plaintext cryptanalytic attack
- Air-gapped network physical segmentation
- Role-based access control by job function
- Misuse case testing of abuse scenarios
- Breach and attack simulation platforms
- Proactive hypothesis-driven threat hunting
- Lessons learned after incident closure
- Access control vestibule stops tailgating
- Cold site characteristics and recovery time