SSCP · Question #31
Which of the following classes is defined in the TCSEC (Orange Book) as discretionary protection?
The correct answer is A. C. The Trusted Computer System Evaluation Criteria (TCSEC) "Orange Book" defines class C as providing discretionary protection, specifically C1 (Discretionary Security Protection) and C2 (Controlled Access Protection).
Question
Which of the following classes is defined in the TCSEC (Orange Book) as discretionary protection?
Options
- AC
- BB
- CA
- DD
How the community answered
(21 responses)- A86% (18)
- B5% (1)
- D10% (2)
Why each option
The Trusted Computer System Evaluation Criteria (TCSEC) "Orange Book" defines class C as providing discretionary protection, specifically C1 (Discretionary Security Protection) and C2 (Controlled Access Protection).
TCSEC, also known as the Orange Book, categorizes system security into divisions and classes. Class C is specifically defined for discretionary protection, where C1 systems provide discretionary security protection and C2 systems offer controlled access protection, both allowing users to control access to objects they own.
Class B (Mandatory Protection) includes B1, B2, and B3, focusing on mandatory access control.
Class A (Verified Protection) is the highest level, requiring formal verification methods.
Division D (Minimal Protection) includes systems that fail to meet the requirements for a higher division.
Concept tested: TCSEC "Orange Book" security classes
Topics
Community Discussion
No community discussion yet for this question.