Which of the following rated systems of the Orange book has mandatory protection of the TCB?

The correct answer is A. B-rated. The Trusted Computer System Evaluation Criteria (TCSEC), known as the Orange Book, defines four division ratings. Division B (Mandatory Protection) requires that the Trusted Computing Base (TCB) enforce mandatory access control (MAC) policies based on sensitivity labels…

Foundational Security Concepts

Question

Options

AB-rated
BC-rated
CD-rated
DA-rated

How the community answered

(40 responses)

A
93% (37)
C
3% (1)
D
5% (2)

Explanation

The Trusted Computer System Evaluation Criteria (TCSEC), known as the Orange Book, defines four division ratings. Division B (Mandatory Protection) requires that the Trusted Computing Base (TCB) enforce mandatory access control (MAC) policies based on sensitivity labels, ensuring that access decisions are made by the system - not just the data owner. B1 adds labeled security, B2 adds structured protection, and B3 adds security domains. Division C (Discretionary Protection) relies on discretionary access controls set by owners. Division D is the lowest level with minimal or no protection. Division A (Verified Protection) is the highest level and includes formal verification of the TCB design - but mandatory TCB protection originates at the B level.

Topics

#Orange Book#TCSEC#Trusted Computing Base#Mandatory Access Control

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSMP Practice