Security Architecture And Design

Front 1

Can perform multiple operations per single instruction. Optimized for systems in which the fetch phase is the longest part of the instruction execution cycle

Back 1

Complex-Instruction-Set Computing (CISC)

Front 2

Requiring fewer clock cycles to execute and optimized for systems in which the fetch and execute phases are approximately equal.

Back 2

Reduced-Instruction-Set Computing (RISC)

Front 3

Alternates the execution of multiple subprograms or tasks on a single processor.

Back 3

Multitasking

Front 4

Alternates the execution of multiple programs on a single processor.

Back 4

Multiprogramming

Front 5

Executes multiple programs on multiple processors simultaneously.

Back 5

Multiprocessing

Front 6

The operating system supports multiple operating states, such as single-user and multiuser modes in the UNIX/Linux world and Normal and Safe modes in the Windows world.

Back 6

Multistate

Front 7

The operating system can differentiate between users. For example, it provides different shell environments, profiles, or privilege levels for each user, as well as process isolation between users.

Back 7

Multiuser

Front 8

What is a group of electronic conductors that interconnect the various components of the computer, transmitting signals, addresses, and data between these components

Back 8

Bus

Front 9

What are the two types of main memory

Back 9

RAM and ROM

Front 10

What are the two types of RAM

Back 10

SRAM and DRAM

Front 11

What are the four types of ROM

Back 11

PROM, EPROM, EEPROM, Flash

Front 12

What is secondary storage

Back 12

Non volitile devices such as hard drives

Front 13

An address used as the origin for calculating other addresses

Back 13

Base Address

Front 14

An address that identifies a location without reference to a base address — or it may be a base address itself

Back 14

Absloute Address

Front 15

Specifies an address relative to an index register. (If the index register changes, the resulting memory location changes.)

Back 15

Index Address

Front 16

The specified address contains the address to the final desired location in memory.

Back 16

Indirect Address

Front 17

Specifies the address of the final desired memory location

Back 17

Direct Address

Front 18

The main components of an operating system are

Back 18

Kernal, Device Drivers, Tools

Front 19

Sets up an environment in which multiple independent processes (programs) can run

Back 19

Process Management

Front 20

Controls access to all available resources, using schemes that may be based on priority or efficiency

Back 20

Resource Management

Front 21

Controls communication to all devices that are connected to the computer, including hard drives, printers, monitors, keyboard, mouse, and so on.

Back 21

I/O Device Management

Front 22

Controls the allocation and access to main memory (RAM), allocating it to processes, as well as general uses such as disk caching

Back 22

Memory Management

Front 23

Controls the file systems that are present on hard drives and other types of devices, and performs all file operations on behalf of individual processes

Back 23

File Management

Front 24

Controls communications on all available communications media on behalf of processes.

Back 24

Communications Management

Front 25

A software implementation of a computer, enabling many running copies of an operating system to execute on a single running computer without interfering with each other.

Back 25

Virtualization

Front 26

What is the entire complement of protection mechanisms within a computer system (including hardware, firmware, and software) that’s responsible for enforcing a security policy.

Back 26

Trusted Computing Base

Front 27

What is the boundary that separates the TCB from the rest of the system

Back 27

Security Perimeter

Front 28

_______ is the ability to permit or deny the use of an object (a system or file) by a subject (an individual or a process).

Back 28

Access control

Front 29

A ________ is a system component that enforces access controls on an object.

Back 29

reference monitor

Front 30

A ________ is the combination of hardware, firmware, and software elements in a Trusted Computing Base (TCB) that implements the reference monitor concept

Back 30

security kernel

Front 31

All authorized users must have a clearance level equal to or higher than the highest level of information processed on the system and a valid need-to-know.

Back 31

Dedicated Security Mode

Front 32

All authorized users must have a clearance level equal to or higher than the highest level of information processed on the system, but a valid need-to-know isn’t necessarily required

Back 32

System High Security Mode

Front 33

Information at different classification levels is stored or processed on a trusted computer system. Authorized users must have an appropriate clearance level, and access restrictions are enforced by the system accordingly.

Back 33

Multilevel Security Mode

Front 34

Authorized users aren’t required to have a security clearance, but the highest level of information on the system is Sensitive but Unclassified (SBU).

Back 34

Limited Access

Front 35

These systems continue to operate after the failure of a computer or network component. The system must be capable of detecting and correcting — or circumventing — a fault.

Back 35

Fault-tolerant systems

Front 36

When a hardware or software failure is detected, program execution is terminated, and the system is protected from compromise.

Back 36

Fail-safe systems

Front 37

When a hardware or software failure is detected, certain noncritical processing is terminated, and the computer or network continues to function in a degraded mode.

Back 37

Fail-soft (resilient) systems

Front 38

When a hardware or software failure is detected, the system automatically transfers processing to a component, such as a clustered server

Back 38

Failover systems

Front 39

Unknown, hidden communications that take place within the medium of a legitimate communications channel.

Back 39

Covert Channels

Front 40

What systems specify the rights that a subject can transfer to or from another subject or object. These rights are defined through four basic operations: create, revoke, take, and grant.

Back 40

Take-Grant

Front 41

Minimal protection - Reserved for systems that fail evaluation.

Back 41

D

Front 42

Discretionary protection (DAC) - System doesn’t need to distinguish between individual users and types of access

Back 42

C1

Front 43

Controlled access protection (DAC) - System must distinguish between individual users and types of access; object reuse security features required.

Back 43

C2

Front 44

Labeled security protection (MAC) - Sensitivity labels required for all subjects and storage objects.

Back 44

B1

Front 45

Structured protection (MAC) - Sensitivity labels required for all subjects and objects; trusted path requirements.

Back 45

B2

Front 46

Security domains (MAC) - Access control lists (ACLs) are specifically required; system must protect against covert channels

Back 46

B3

Front 47

Verified design (MAC) - Formal Top-Level Specification (FTLS) required; configuration management procedures must be enforced throughout entire system life cycle.

Back 47

A1

Front 48

What is a formal methodology for comprehensive testing and documentation of information system security safeguards, both technical and nontechnical, in a given environment by using established evaluation criteria

Back 48

Certification

Front 49

________ is an official, written approval for the operation of a specific system in a specific environment, as documented in the certification report

Back 49

Accreditation

Front 50

What was the first formal confidentiality model of a mandatory access control system

Back 50

Bell LaPadula

Front 51

An ________ consists of access control lists (columns) and capability lists (rows)

Back 51

Access Matrix

Front 52

What is a lattice-based model that addresses the first goal of integrity: ensuring that modifications to data aren’t made by unauthorized users or processes

Back 52

Biba

Front 53

This model is based on the concept of a well-formed transaction, in which a transaction is sufficiently ordered and controlled so that it maintains internal and external consistency

Back 53

Clark Wilson

Front 54

This model type is useful for analyzing covert channels, through detailed analysis of the flow of information in a system, including the sources of information and the paths of flow

Back 54

Information Flow Model

Front 55

This ensures that the actions of different objects and subjects aren’t seen by (and don’t interfere with) other objects and subjects on the same system

Back 55

Non-interference model