Information flow is clearly central to confidentiality but to some extent it also applies to integrity. The basic work in this area was done around 1970 and was driven mostly by the defense sector. Information flow in computer systems is concerned with flow from one security class (also called security label) to another. These controls are applied to objects. An object is a container of information, and an object can be a directory or file.

Role-based access control (RBAC) gives the security officers the ability to specify and enforce enterprise-specific security policies in a way that maps naturally to an organization's structure. Each user is assigned one or more roles, and each role is assigned one or more privileges that are given to users in that role. An access control list (ACL) is a table that tells a system which access rights each user has to a particular system object. With discretionary access control, administration is decentralized and owners of resources control other users' access. Non-mandatory access control is not a defined access control technique. Source: ANDRESS, Mandy, Exam Cram CISSP, Coriolis, 2001, Chapter 2: Access Control Systems and Methodology (page 9).

For the purpose of the exam, one needs to be very clear on all the available choices
within cryptography,
because different steps and algorithms provide different types of security services:
A message can be encrypted, which provides confidentiality.
A message can be digitally signed, which provides authentication, nonrepudiation, and integrity.
A message can be hashed, which provides integrity.
A message can be encrypted and digitally signed, which provides confidentiality, authentication,
nonrepudiation, and integrity.
The following answers are incorrect:
Confidentiality and Authentication
Confidentiality and Non-repudiation
Confidentiality and Integrity
The following reference(s) were/was used to create this question:
Harris, Shon (2012-10-18). CISSP All-in-One Exam Guide, 6th Edition (pp. 829-830). McGraw-Hill
. Kindle Edition.

A Tape Array is a large hardware/software backup system based on the RAID
technology.
There is a misconception that RAID can only be used with Disks.
All large storage vendor from HP, to EMC, to Compaq have Tape Array based on RAID
technology they offer.
This is a VERY common type of storage at an affordable price as well.
So RAID is not exclusively for DISKS. Often time this is referred to as Tape Librairies or simply
RAIT.
RAIT (redundant array of independent tapes) is similar to RAID, but uses tape drives instead of
disk drives. Tape storage is the lowest-cost option for very large amounts of data, but is very slow
compared to disk storage. As in RAID 1 striping, in RAIT, data are striped in parallel to multiple
tape drives, with or without a redundant parity drive. This provides the high capacity at low cost
typical of tape storage, with higher-than-usual tape data transfer rates and optional data integrity.
References:
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of
Computer Security, 2001, John Wiley & Sons, Page 70.
and
Harris, Shon (2012-10-18). CISSP All-in-One Exam Guide, 6th Edition (p. 1271). McGraw-Hill.
Kindle Edition.

Explanation/Reference:
Explanation:
An incremental backup is fast because it copies only the files that have been modified since the previous backup.
Incorrect Answers:
A: A full backup is not fast as it copies all the data from the system to the backup medium.
C: There is no backup method called the fast backup method.
D: A differential backup is slower than an incremental backup since it copies more data. A differential backup copies only the difference in the data since the last full backup.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 1410