For a semester exam, which option is correct about Clark-Wilson model?

A. an integrity model based on well-formed transactions and separation of duties B. a network routing protocol C. a confidentiality-only model D. a browser caching rule