The Reference Validation Mechanism that ensures the authorized access relationships between subjects and objects is implementing which of the following concept:

Question

Options

• AThe reference monitor.
• BDiscretionary Access Control.
• CThe Security Kernel.
• DMandatory Access Control.

• A
  88% (21)
• C
  8% (2)
• D
  4% (1)

Explanation

Option A is correct because the Reference Validation Mechanism (RVM) is the reference monitor - it's the abstract machine concept that mediates every access between a subject (user/process) and an object (file/resource), ensuring only authorized relationships are permitted. The RVM must be tamper-proof, always invoked, and small enough to be verified.

Why the distractors are wrong:

• B (DAC) and D (MAC) are access control policies (rules about who can access what), not the enforcement mechanism itself - the RVM enforces whatever policy is in place.
• C (Security Kernel) is the hardware/software implementation of the reference monitor concept; it's the concrete realization, not the conceptual mechanism being described.

Memory tip: Think of it as layers - the reference monitor is the concept/policy enforcer, the security kernel is its code implementation, and DAC/MAC are the rules it enforces. The question asks about the validating mechanism, which points directly to the reference monitor.

No community discussion yet for this question.