nerdexam
EC-Council

312-50V10 · Question #269

What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

The correct answer is C. Common Criteria. Common Criteria (ISO/IEC 15408) is the international standard providing a framework of requirements for evaluating and certifying the security functionality of IT products.

Information Security and Ethical Hacking Fundamentals

Question

What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

Options

  • ABlue Book
  • BISO 26029
  • CCommon Criteria
  • DThe Wassenaar Agreement

How the community answered

(61 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    87% (53)
  • D
    7% (4)

Why each option

Common Criteria (ISO/IEC 15408) is the international standard providing a framework of requirements for evaluating and certifying the security functionality of IT products.

ABlue Book

The 'Blue Book' is an informal reference to various DoD or telecommunications documents and is not an international IT security product evaluation standard.

BISO 26029

ISO 26029 does not correspond to an IT security evaluation standard - the correct ISO designation for Common Criteria is ISO/IEC 15408.

CCommon CriteriaCorrect

Common Criteria defines internationally recognized requirements - including Protection Profiles and Evaluation Assurance Levels (EALs) - that establish a baseline of confidence in an IT product's security claims. It is formalized as ISO/IEC 15408 and is mutually recognized by member governments, making it the definitive standard for IT security product evaluation globally.

DThe Wassenaar Agreement

The Wassenaar Arrangement is a multilateral export control regime governing conventional weapons and dual-use goods, not a framework for evaluating IT product security functionality.

Concept tested: Common Criteria IT security evaluation standard

Source: https://www.commoncriteriaportal.org/cc/

Topics

#Common Criteria#security standards#IT product evaluation#certification

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice