A security administrator needs a secure computing solution to use for all of the company's security audit log storage, and to act as a central server to execute security functions from. Which of the…

Question

Options

• AA hardened Red Hat Enterprise Linux implementation running a software firewall
• BWindows 7 with a secure domain policy and smartcard based authentication
• CA hardened bastion host with a permit all policy implemented in a software firewall
• DSolaris 10 with trusted extensions or SE Linux with a trusted policy

• A
  3% (2)
• B
  17% (11)
• C
  8% (5)
• D
  71% (45)

Explanation

Solaris 10 with Trusted Extensions and SELinux with a Trusted Policy both implement Mandatory Access Control (MAC), which enforces security policies at the kernel level and prevents even privileged users from bypassing access controls. This makes them ideal for storing sensitive audit logs and running security functions. Option A (hardened RHEL with software firewall) provides good security but lacks the MAC enforcement of a trusted OS. Option B (Windows 7) is an outdated, end-of-life OS and unsuitable for high-security environments. Option C is directly contradicted by its own 'permit all' firewall policy-a bastion host with a permit-all rule provides no meaningful access control. Trusted operating systems with MAC are the gold standard for high-assurance security environments.

No community discussion yet for this question.