SSCP · Question #165
Which TCSEC level is labeled Controlled Access Protection?
The correct answer is B. C2. The Trusted Computer System Evaluation Criteria (TCSEC), also known as the Orange Book, defines security divisions from D (Minimal Protection) through A (Verified Protection). Within Division C (Discretionary Protection): C1 is 'Discretionary Security Protection' and C2 is 'Contr
Question
Options
- AC1
- BC2
- CC3
- DB1
How the community answered
(17 responses)- B94% (16)
- C6% (1)
Explanation
The Trusted Computer System Evaluation Criteria (TCSEC), also known as the Orange Book, defines security divisions from D (Minimal Protection) through A (Verified Protection). Within Division C (Discretionary Protection): C1 is 'Discretionary Security Protection' and C2 is 'Controlled Access Protection.' C2 adds individual accountability through login procedures, audit trails, and resource isolation that C1 lacks. B1 is 'Labeled Security Protection,' which introduces mandatory access controls and sensitivity labels - a higher level than C2.
Topics
Community Discussion
No community discussion yet for this question.