What can best be described as an abstract machine which must mediate all access to subjects to objects?

The correct answer is B. The reference monitor. The reference monitor is an abstract machine which must mediate all access to subjects to objects, be protected from modification, be verifiable as correct, and is always invoked. The security kernel is the hardware, firmware and software elements of a trusted computing base that

Submitted by lucia.co· Apr 18, 2026Access Controls

Question

Options

AA security domain
BThe reference monitor
CThe security kernel
DThe security perimeter

How the community answered

(54 responses)

A
2% (1)
B
87% (47)
C
7% (4)
D
4% (2)

Explanation

The reference monitor is an abstract machine which must mediate all access to subjects to objects, be protected from modification, be verifiable as correct, and is always invoked. The security kernel is the hardware, firmware and software elements of a trusted computing base that implement the reference monitor concept. The security perimeter includes the security kernel as well as other security-related system functions that are within the boundary of the trusted computing base. System elements that are outside of the security perimeter need not be trusted. A security domain is a domain of trust that shares a single security policy and single

Topics

#Reference monitor#Access control#Security architecture#Trusted computing base

Community Discussion

No community discussion yet for this question.

Full SSCP Practice