SSCP · Question #340
Which of the following describes a logical form of separation used by secure computing systems?
The correct answer is B. Processes are constrained so that each cannot access objects outside its permitted domain.. A logical form of separation in secure computing systems involves constraining processes to prevent access to objects outside their permitted domain.
Question
Which of the following describes a logical form of separation used by secure computing systems?
Options
- AProcesses use different levels of security for input and output devices.
- BProcesses are constrained so that each cannot access objects outside its permitted domain.
- CProcesses conceal data and computations to inhibit access by outside processes.
- DProcesses are granted access based on granularity of controlled objects.
How the community answered
(28 responses)- A7% (2)
- B89% (25)
- C4% (1)
Why each option
A logical form of separation in secure computing systems involves constraining processes to prevent access to objects outside their permitted domain.
Using different security levels for input and output devices is related to multi-level security, but does not directly describe the logical separation of processes' access domains.
Logical separation ensures that processes or users are isolated from each other and from critical system resources, meaning each process is constrained so it cannot access objects (e.g., memory, files, devices) outside its assigned security domain. This isolation is often achieved through mechanisms like virtualization, sandboxing, or operating system access controls, creating secure compartments within a shared computing environment.
Concealing data and computations describes encapsulation or information hiding, which is a software design principle, not the overarching principle of logical separation in secure computing systems.
Granting access based on the granularity of controlled objects describes fine-grained access control, which is a method of access control, but not the fundamental principle of logical separation itself.
Concept tested: Logical separation in secure computing
Source: https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/hyper-v-security
Topics
Community Discussion
No community discussion yet for this question.