Ensuring that a process does what it is intended to do every time is called the __________ concept.

Ensuring that a process does what it is intended to do every time is called the __________ concept.

Ensuring that a process does what it is intended to do every time is called the __________ concept.

A.
Well-formed transaction

B.
External consistency

C.
Internal consistency

D.
Separation of duties

Explanation:
The Clark-Wilson model concentrates on principles of integrity. One
idea is the internal consistency concept. This says that computing processes always
do what they are intended to do, which ensures data integrity.



Leave a Reply 2

Your email address will not be published. Required fields are marked *


cymple1

cymple1

Well-formed transactions is about enternal and external consistency. I believe “A” is the most correct answer.

lordinfidel

lordinfidel

I do agree that this question is very poorly written, as there is no way to deduce they are referring to clark-wilson.

With that said, depending on which book you read will either confuse or enlighten.

From Tipton, Harold F. (2010-04-20). Official (ISC)2 Guide to the CISSP CBK, Second Edition ((ISC)2 Press)

“To address internal consistency (or consistency within the model system itself), Clark and Wilson recommended a strict definition of well-formed transactions.”

But when you read Shon Harris book (5th ed, pgs 341 thru 344), they don’t specify internal consistency specfically, except when they lump it on page 344 with external consistency and the 3 main goals of integrity models.

“Maintain internal and external consistency (well-formed transactions)”

But on 343, it contains:

“Using TPs [transformation procedures] to modify CDIs [constrained data items] is referred to as a well-formed transaction.”

Thus IMO, none of the answers truly fit. Again, IMO, if they were referencing Clark-Wilson, and was trying to address integrity in terms of making sure a process did what is was supposed to with the data (aka consistency), the most likely answer would of have been “Integrity verification Procedures (IVPs): Checks the consistency of CDIs with external reality”