nerdexam
EC-Council

312-50V11 · Question #269

What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

The correct answer is C. Common Criteria. Common Criteria (ISO/IEC 15408) is the internationally recognized standard for evaluating and certifying the security properties of IT products.

Information Security and Ethical Hacking Fundamentals

Question

What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

Options

  • ABlue Book
  • BISO 26029
  • CCommon Criteria
  • DThe Wassenaar Agreement

How the community answered

(23 responses)
  • A
    4% (1)
  • C
    91% (21)
  • D
    4% (1)

Why each option

Common Criteria (ISO/IEC 15408) is the internationally recognized standard for evaluating and certifying the security properties of IT products.

ABlue Book

The 'Blue Book' refers to the older U.S. DoD Trusted Computer System Evaluation Criteria (TCSEC), which was a U.S.-only standard superseded by Common Criteria.

BISO 26029

ISO 26029 does not correspond to an IT security product evaluation standard; it is not a recognized identifier in this domain.

CCommon CriteriaCorrect

Common Criteria (formally ISO/IEC 15408) is the international standard that defines a framework of security requirements known as Protection Profiles and Security Targets. It provides assurance levels (EAL1-EAL7) that establish increasing degrees of confidence in a product's security functionality. Evaluation against Common Criteria is recognized by governments and organizations worldwide through the Common Criteria Recognition Arrangement (CCRA).

DThe Wassenaar Agreement

The Wassenaar Arrangement is a multilateral export control regime governing dual-use goods and technologies, not a security evaluation framework for IT products.

Concept tested: Common Criteria IT security evaluation standard

Source: https://csrc.nist.gov/projects/common-criteria

Topics

#Common Criteria#security standards#IT evaluation#security framework

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice