Reference: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, 2001, McGraw-Hill/Osborne, page 467; SMITH, Richard E., Internet Cryptography, 1997, Addison-Wesley Pub Co.

The only way to ensure an ultra-secure communications channel that cannot be intercepted without detection is to use Quantum Key Distribution (QKD). QKD is a technique that uses the principles of quantum mechanics to generate and exchange cryptographic keys between two parties. QKD relies on the properties of quantum particles, such as photons or electrons, to encode and transmit the keys. QKD offers the following advantages for securing communications:
* It provides unconditional security, as the keys are generated and exchanged in a random and unpredictable manner, and cannot be computed or guessed by any algorithm or attacker.
* It ensures perfect secrecy, as the keys are used only once and then discarded, and cannot be reused or intercepted by any eavesdropper.
* It enables detection of intrusion, as any attempt to observe or measure the quantum particles will alter their state and introduce errors or anomalies in the communication, which can be noticed and reported by the legitimate parties. QKD is currently limited by the distance, speed, and cost of the quantum communication channels, but it is expected to become more feasible and widespread in the future,
* especially with the development of quantum networks and quantum computers. References: CISSP All-in-One Exam Guide, Chapter 4: Communication and Network Security, Section: Quantum Cryptography, pp. 252-253.

Explanation/Reference:
Explanation:
The Biba model was developed after the Bell-LaPadula model. It is a state machine model similar to the Bell-LaPadula model. Biba addresses the integrity of data within applications.
The Biba model uses a lattice of integrity levels. If implemented and enforced properly, the Biba model prevents data from any integrity level from flowing to a higher integrity level.
Biba has three main rules to provide this type of protection:
*-integrity axiom: A subject cannot write data to an object at a higher integrity level (referred to as "no

write up").
Simple integrity axiom: A subject cannot read data from a lower integrity level (referred to as "no read

down").
Invocation property: A subject cannot request service (invoke) of higher integrity.

Incorrect Answers:
A: The * (star) integrity axiom means "no write up", not "no read up".
B: The * (star) integrity axiom means "no write up", not "no write down".
C: The * (star) integrity axiom means "no write up", not "no read down".
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 372

ISC2 identifies lack of change control as a common cause of security failures in its Common Body of Knowledge (CBK). It includes a section on Security Operations, which covers topics such as change management, configuration management, and incident management. Within this section, lack of change control is identified as a common cause of security failures. Additionally, many other sources in the field of information security also identify lack of change control as a common issue that can lead to security incidents.