Which of the following TCB components is a hardware, firmware, and software element that implements the reference monitor concept?

Question

Options

• ASecurity perimeter
• BSecurity Kernel
• CTrusted computer system
• DTrusted path

• A
  11% (3)
• B
  81% (22)
• C
  4% (1)
• D
  4% (1)

Explanation

Security Kernel is the hardware, firmware, and software element that implements the reference monitor concept - the abstract mechanism that enforces access control policies by mediating every access attempt between subjects and objects. It is the core enforcement engine within the Trusted Computing Base (TCB).

Why the distractors are wrong:

• A. Security perimeter defines the boundary separating trusted from untrusted components, but it is a boundary concept, not an implementation of the reference monitor.
• C. Trusted computer system refers to the entire system that meets specific security requirements (e.g., evaluated against a standard like the Orange Book) - it contains the Security Kernel but is not the kernel itself.
• D. Trusted path is a secure communication channel between the user and the TCB (e.g., the Windows Ctrl+Alt+Delete mechanism) - it ensures authenticity of interaction, not reference monitor enforcement.

Memory tip: Think "Kernel = Core enforcer." Just as an OS kernel is the core of an operating system, the Security Kernel is the core enforcer of security policy - it implements (not just defines or surrounds) the reference monitor that every access request must pass through.

No community discussion yet for this question.