(ISC)2
SSCP · Question #293
A trusted system does NOT involve which of the following?
The correct answer is C. Assurance that the security policy can be enforced in an efficient and reliable manner. A trusted system is one that meets its intended security requirements. It involves sufficiency and effectiveness, not necessarily efficiency, in enforcing a security policy. Put succinctly, trusted systems have (1) policy, (2) mechanism, and (3) assurance.
Submitted by ngozi_ng· Apr 18, 2026Security Concepts and Practices
Question
A trusted system does NOT involve which of the following?
Options
- AEnforcement of a security policy.
- BSufficiency and effectiveness of mechanisms to be able to enforce a security policy.
- CAssurance that the security policy can be enforced in an efficient and reliable manner.
- DIndependently-verifiable evidence that the security policy-enforcing mechanisms are
How the community answered
(39 responses)- A5% (2)
- B3% (1)
- C92% (36)
Explanation
A trusted system is one that meets its intended security requirements. It involves sufficiency and effectiveness, not necessarily efficiency, in enforcing a security policy. Put succinctly, trusted systems have (1) policy, (2) mechanism, and (3) assurance.
Topics
#Trusted Systems#Security Policy Enforcement#Security Architecture#Assurance
Community Discussion
No community discussion yet for this question.