Which of the following BEST describes the purpose of the reference monitor when defining access control to enforce the security model?

Question

Options

• AQuality design principles to ensure quality by design
• BPolicies to validate organization rules
• CCyber hygiene to ensure organizations can keep systems healthy
• DStrong operational security to keep unit members safe

• A
  9% (3)
• B
  14% (5)
• C
  3% (1)
• D
  74% (26)

Explanation

The purpose of the reference monitor when defining access control to enforce the security model is to provide strong operational security to keep unit members safe. The reference monitor is an abstract concept that represents the mechanism that mediates all access requests between subjects and objects, and enforces the security policy defined by the security model. The should ensure that only authorized and legitimate access requests are granted, and that any unauthorized or malicious access requests are denied or logged. The reference monitor should also protect the confidentiality, integrity, and availability of the system and the data. Quality design principles to ensure quality by design, policies to validate organization rules, and cyber hygiene to ensure organizations can keep systems healthy are not the purpose of the reference monitor, but rather the goals or the outcomes of the security program.

No community discussion yet for this question.