CAS-002 · Question #675
A security administrator needs a secure computing solution to use for all of the company's security audit log storage, and to act as a central server to execute security functions from. Which of the…
The correct answer is D. Solaris 10 with trusted extensions or SE Linux with a trusted policy. Solaris Trusted Extensions and SELinux with a trusted policy implement mandatory access control frameworks purpose-built for high-security environments like audit log storage.
Question
A security administrator needs a secure computing solution to use for all of the company's security audit log storage, and to act as a central server to execute security functions from. Which of the following is the BEST option for the server in this scenario?
Options
- AA hardened Red Hat Enterprise Linux implementation running a software firewall
- BWindows 7 with a secure domain policy and smartcard based authentication
- CA hardened bastion host with a permit all policy implemented in a software firewall
- DSolaris 10 with trusted extensions or SE Linux with a trusted policy
How the community answered
(44 responses)- A2% (1)
- B9% (4)
- C18% (8)
- D70% (31)
Why each option
Solaris Trusted Extensions and SELinux with a trusted policy implement mandatory access control frameworks purpose-built for high-security environments like audit log storage.
A standard RHEL implementation with only a software firewall lacks a formally enforced MAC policy framework and does not provide the high-assurance security required for audit log integrity.
Windows 7 is an end-of-life operating system with no active security support and lacks a built-in MAC enforcement framework comparable to SELinux trusted policies.
A permit-all firewall policy on a bastion host directly contradicts hardening principles and would expose the security server to all inbound traffic, undermining its purpose.
Solaris 10 Trusted Extensions and SELinux with a trusted policy both enforce mandatory access control (MAC), which provides kernel-level separation of security domains and prevents unauthorized access to audit logs even by privileged users. These platforms are specifically designed for environments requiring high assurance security, making them the strongest choice for a centralized security function server.
Concept tested: Hardened OS with mandatory access control for secure servers
Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/using_selinux/index
Topics
Community Discussion
No community discussion yet for this question.