A Security Kernel is defined as a strict implementation of a reference monitor mechanism responsible for enforcing a security policy. To be secure, the kernel must meet three basic conditions, what…

The correct answer is D. Completeness, Isolation, and Verifiability. For a Security Kernel to properly enforce a reference monitor policy, it must satisfy three conditions: (1) Completeness - it must mediate every access attempt without exception; (2) Isolation - it must be protected from unauthorized modification or tampering; (3) Verifiability…

Submitted by kevin_r· Apr 18, 2026Systems and Application Security

Question

A Security Kernel is defined as a strict implementation of a reference monitor mechanism responsible for enforcing a security policy. To be secure, the kernel must meet three basic conditions, what are they?

Options

AConfidentiality, Integrity, and Availability
BPolicy, mechanism, and assurance
CIsolation, layering, and abstraction
DCompleteness, Isolation, and Verifiability

How the community answered

(26 responses)

A
4% (1)
B
8% (2)
D
88% (23)

Explanation

For a Security Kernel to properly enforce a reference monitor policy, it must satisfy three conditions: (1) Completeness - it must mediate every access attempt without exception; (2) Isolation - it must be protected from unauthorized modification or tampering; (3) Verifiability - it must be small and simple enough to be formally analyzed, tested, and proven correct. CIA (A) describes information security goals, not kernel properties. Policy, mechanism, and assurance (B) are elements of security models. Isolation, layering, and abstraction (C) are security design principles, not the three reference monitor conditions.

Topics

#Security Kernel#Reference Monitor#Operating System Security#Trusted Computing Base

Community Discussion

No community discussion yet for this question.

Full SSCP Practice