All levels from C2 and above require Auditing mechanisms. C2: Controlled Access
Protection: Identify individuals, auditing (especially of security related events which must be
protected), object reuse concept, strict logon, decision making capability when subjects access
objects.
The following answers are incorrect:
C1 and above. Is incorrect because auditing is not a requirement until level C2. C1 is a lower level.
B1 and above. Is incorrect because auditing is a requirement of level C2. B1 is a higher level so
would not address level C2.
B2 and above. Is incorrect because auditing is a requirement of level C2. B2 is a higher level so
would not address level C2.

Explanation/Reference:
Explanation:
HTTP uses port 80.
Incorrect Answers:
A: HTTP uses port 80, not port 81.
C: HTTP uses port 80, not port 8080.
D: HTTP uses port 80, not port 8180.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 537

There is no need to prevent modification from authorized users. They are authorized and allowed to make the changes. On top of this, it is also NOT one of the goal of Integrity within Clark-Wilson. As it turns out, the Biba model addresses only the first of the three integrity goals which is Prevention of the modification of information by unauthorized users. Clark-Wilson addresses all three goals of integrity.
The Clark-Wilson model improves on Biba by focusing on integrity at the transaction level and addressing three major goals of integrity in a commercial environment. In addition to preventing changes by unauthorized subjects, Clark and Wilson realized that high-integrity systems would also have to prevent undesirable changes by authorized subjects and to ensure that the system continued to behave consistently. It also recognized that it would need to ensure that there is constant mediation between every subject and every object if such integrity was going to be maintained.
Integrity is addressed through the following three goals:
1.Prevention of the modification of information by unauthorized users.
2.Prevention of the unauthorized or unintentional modification of information by authorized users.
3.Preservation of the internal and external consistency.
The following reference(s) were used for this question:
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition
((ISC)2 Press) (Kindle Locations 17689-17694). Auerbach Publications. Kindle Edition.
and
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of
Computer Security, 2001, John Wiley & Sons, Page 31.