Memory management in TCSEC levels B3 and A1 operating systems may utilize "data hiding". What does this mean?

Question

Options

• ASystem functions are layered, and none of the functions in a given layer can access data
• BAuditing processes and their memory addresses cannot be accessed by user processes.
• COnly security processes are allowed to write to ring zero memory.
• DIt is a form of strong encryption cipher.

• A
  86% (43)
• B
  2% (1)
• C
  8% (4)
• D
  4% (2)

Explanation

At TCSEC B3 and A1 levels, systems employ a layered (ring-based) architecture where 'data hiding' is an information-hiding design principle. Each layer can only access data and interfaces exposed by adjacent layers - functions within one layer cannot directly read or write data belonging to another layer. This enforces strict separation and least privilege across architectural layers. It is not about encryption (D), not limited to auditing processes (B), and does not specifically restrict ring-zero writes to security processes only (C). The concept comes from software engineering's modular decomposition, applied here to enforce security boundaries.

No community discussion yet for this question.