Which of the following classes is the first level (lower) defined in the TCSEC (Orange Book) as mandatory protection?

The correct answer is A. B. The Trusted Computer System Evaluation Criteria (TCSEC), also known as the Orange Book, defines four divisions: D (Minimal Protection), C (Discretionary Protection with classes C1 and C2), B (Mandatory Protection with classes B1, B2, and B3), and A (Verified Protection with…

Submitted by satoshi_tk· Apr 18, 2026Access Controls

Question

Which of the following classes is the first level (lower) defined in the TCSEC (Orange Book) as mandatory protection?

Options

How the community answered

(28 responses)

A
89% (25)
B
4% (1)
D
7% (2)

Explanation

The Trusted Computer System Evaluation Criteria (TCSEC), also known as the Orange Book, defines four divisions: D (Minimal Protection), C (Discretionary Protection with classes C1 and C2), B (Mandatory Protection with classes B1, B2, and B3), and A (Verified Protection with class A1). Mandatory protection begins at Division B - specifically at class B1 (Labeled Security Protection), which is the lowest level that enforces mandatory access controls based on security labels. Divisions C and D rely only on discretionary controls. Division A represents the highest, formally verified protection. Therefore, class B is the first (lowest) level of mandatory protection.

Topics

#TCSEC#Orange Book#Mandatory Access Control#Security Evaluation

Community Discussion

No community discussion yet for this question.

Full SSCP Practice