nerdexam
(ISC)2

SSCP · Question #165

Which TCSEC level is labeled Controlled Access Protection?

The correct answer is B. C2. The Trusted Computer System Evaluation Criteria (TCSEC), also known as the Orange Book, defines security divisions from D (Minimal Protection) through A (Verified Protection). Within Division C (Discretionary Protection): C1 is 'Discretionary Security Protection' and C2 is 'Contr

Submitted by jaden.t· Apr 18, 2026Access Controls

Question

Which TCSEC level is labeled Controlled Access Protection?

Options

  • AC1
  • BC2
  • CC3
  • DB1

How the community answered

(17 responses)
  • B
    94% (16)
  • C
    6% (1)

Explanation

The Trusted Computer System Evaluation Criteria (TCSEC), also known as the Orange Book, defines security divisions from D (Minimal Protection) through A (Verified Protection). Within Division C (Discretionary Protection): C1 is 'Discretionary Security Protection' and C2 is 'Controlled Access Protection.' C2 adds individual accountability through login procedures, audit trails, and resource isolation that C1 lacks. B1 is 'Labeled Security Protection,' which introduces mandatory access controls and sensitivity labels - a higher level than C2.

Topics

#TCSEC#Evaluation criteria#Controlled Access Protection#Security models

Community Discussion

No community discussion yet for this question.

Full SSCP Practice