As with any model, the Bell-LaPadula model has some weaknesses. These are the major ones. The model considers normal channels of the information exchange and does not address covert channels. -Ronald Krutz The CISSP PREP Guide (gold edition) pg 275-276

Section: Mixed questions

B1 is also called "Labeled Security" and each data object must have a classification
label and each subject a clearence label. On each access attempt, the classification and clearence
are checked to verify that the access is permissable.
C2 is incorrect. C2 is also called "Controlled Access Protection" and only requires that subjects be
individually identified and that security-related events are auditable.
B2 is incorrect. B2 is also called "Structured Protection" and imposes additional controls on
security policy and a more thorough review of system design and implementation.
B3 is incorrect. B3 is also called "Security Domains" and and imposes more granularity in each
protection mechanism.
References:
CBK, pp. 329 - 330
AIO3 pp.302 - 307