SSCP · Question #1087
A Security Reference Monitor relates to which DoD security standard?
The correct answer is B. C2. A Security Reference Monitor is a fundamental concept associated with the C2 level of the DoD Trusted Computer System Evaluation Criteria (TCSEC) standard.
Question
A Security Reference Monitor relates to which DoD security standard?
Options
- ALC3
- BC2
- CD1
- DL2TP
- ENone of the items listed
How the community answered
(65 responses)- B89% (58)
- C2% (1)
- D6% (4)
- E3% (2)
Why each option
A Security Reference Monitor is a fundamental concept associated with the C2 level of the DoD Trusted Computer System Evaluation Criteria (TCSEC) standard.
LC3 is not a recognized DoD security standard or evaluation level within the TCSEC framework.
The C2 level of the DoD TCSEC, also known as the 'Orange Book,' mandates the implementation of a Security Reference Monitor. This monitor is an abstract mechanism that mediates all access attempts by subjects to objects, ensuring that security policies are strictly enforced and access control is maintained.
D1 is the lowest security level in TCSEC, offering minimal protection and not requiring the full conceptualization of a Security Reference Monitor.
L2TP (Layer 2 Tunneling Protocol) is a network protocol for virtual private networks, not a DoD security standard for system evaluation.
Choice B is correct, rendering 'None of the items listed' incorrect.
Concept tested: DoD TCSEC C2 security requirements
Source: https://en.wikipedia.org/wiki/Trusted_Computer_System_Evaluation_Criteria
Topics
Community Discussion
No community discussion yet for this question.