Orange Book

Front 1

Covert Channel Analysis is required for systems evaluated at what TCSEC level?

Back 1

B2 and above

Front 2

According to the Orange Book, which security level is the first to require a system to support separate operator and system administrator roles?

Back 2

B2

Front 3

Which Orange Book security rating requires that formal techniques are used to prove the equivalence between the TCB specifications and the security policy model?

Back 3

A1

Front 4

Which TCSEC level first addresses object reuse?

Back 4

C2

Front 5

Which of the following is the lowest TCSEC class wherein the systems must support separate operator and system administrator roles?

Back 5

B2

Front 6

one level of information classification; all users have a need to know

Back 6

Dedicated Security Mode

Front 7

one level of information classification; not all users have need to know for all information.

Back 7

System high security mode

Front 8

multiple levels of information classification but users must all be cleared for the highest level; not all users have need to know for all information

Back 8

Compartmented

Front 9

multiple levels of information classification; not all users have need to know for all information; users must have appropriate clearence matching the information they need to know

Back 9

Multilevel

Front 10

Compartmented Mode Workstations (CMW) are most similar to what Orange Book evaluation level?

Back 10

B3

Front 11

Minimal protection

Back 11

D

Front 12

Discretionary protection

Back 12

C

Front 13

Discretionary security protection

Back 13

C1

Front 14

Controlled access protection

Back 14

C2

Front 15

Mandatory protection

Back 15

B

Front 16

Labeled security

Back 16

B1

Front 17

Structured protection

Back 17

B2

Front 18

Which evaluation class of the Trusted Network Interpretation (TNI) offers security domains?

Back 18

B3

Front 19

Verified protection

Back 19

A

Front 20

Verified design

Back 20

A1

Front 21

architecture, system integrity, covert channel analysis, trusted facility management and trusted recovery.

Back 21

Operational assurance requirements

Front 22

In Mandatory Access Control, sensitivity labels contain what information?

Back 22

The items classification and category set

Front 23

What is the lowest TCSEC class wherein the system must protect against covert storage channels (but not necessarily covert timing channels)?

Back 23

B2

Front 24

What does the Clark-Wilson security model focus on?

Back 24

Integrity

Front 25

Which class is defined in the TCSEC (Orange Book) as minimal protection?

Back 25

D

Front 26

Simple security rule: A subject cannot read data within an object that resides at a higher security level ("No read up" rule).

*- property rule: A subject cannot write to an object at a lower security level ("No write down" rule).

Strong star property rule: For a subject to be able to read and write to an object, the subject’s clearance and the object’s classification must be equal.

Back 26

Bell-LaPadula model

Front 27

Mandatory protection

Back 27

B

Front 28

The Orange Book states that "Hardware and software features shall be provided that can be used to periodically validate the correct operation of the on-site hardware and firmware elements of the TCB [Trusted Computing Base]." This statement is the formal requirement for:

Back 28

System Integrity

Front 29

A formal model of the security policy must be clearly identified and documented, including a mathematical proof that the model is consistent with its axioms and is sufficient to support the security policy

Back 29

Design verification

Front 30

Which security model is based on the military classification of data and people with clearances?

Back 30

Bell Lapadula

Front 31

Configuration Management controls what?

Back 31

Auditing and controlling any changes to the Trusted Computing Base.

Front 32

a government program that prevents the compromising electrical and electromagnetic signals that emanate from computers and related equipment from being intercepted and deciphered.

Back 32

Tempest

Front 33

addresses such concepts as nondiscretionary access control, privilege separation, and least privilege.

Back 33

Clark Wilson

Front 34

an integrity model of computer security policy that describes a set of rules. In this model, a subject may not depend on any object or other subject that is less trusted than itself.

Back 34

Biba

Front 35

security policy model on which the Orange Book requirements are based

Back 35

Bell Lapadula

Front 36

Which of the following describes a computer processing architecture in which a language compiler or pre-processor breaks program instructions down into basic operations that can be performed by the processor at the same time?

Back 36

Very-Long Instruction-Word Processor (VLIW)

Front 37

What can be described as an imaginary line that separates the trusted components of the TCB from those elements that are NOT trusted?

Back 37

The Security Perimeter

Front 38

Which TCSEC level introduces formal covert channel analysis?

Back 38

A1

Front 39

According to the Orange Book, which security level is the first to require trusted recovery?

Back 39

B3

Front 40

In what security mode can a system be operating if all users have the clearance to all data processed by the system, but might not have the need-to-know and formal access approval?

Back 40

Compartmented security mode

Front 41

All users can access ALL data.
Signed NDA for ALL information on the system.
Proper clearance for ALL information on the system.
Formal access approval for ALL information on the system.
A valid need to know for ALL information on the system.

Back 41

Dedicated security Mode

Front 42

All users can access SOME data, based on their need to know.
Signed NDA for ALL information on the system.
Proper clearance for ALL information on the system.
Formal access approval for ALL information on the system.
A valid need to know for SOME information on the system.

Back 42

System high security mode

Front 43

All users can access SOME data, based on their need to know and formal access approval.
Signed NDA for ALL information on the system.
Proper clearance for ALL information on the system.
Formal access approval for SOME information they will access on the system.
A valid need to know for SOME information on the system.

Back 43

Compartmented security mode

Front 44

All users can access SOME data, based on their need to know, clearance and formal access approval.
Signed NDA for ALL information on the system.
Proper clearance for SOME information on the system.
Formal access approval for SOME information on the system.
A valid need to know for SOME information on the system.

Back 44

Multilevel security mode

Front 45

The Orange Book requires auditing mechanisms for any systems evaluated at which of the following levels?

Back 45

C2 and above

Front 46

What is the main focus of the Bell-LaPadula security model?

Back 46

Confidentiality

Front 47

At what Orange Book evaluation levels are design specification and verification required?

Back 47

B1 and above

Front 48

What does the * (star) integrity axiom mean in the Biba model?

Back 48

No write up

Front 49

functionally tested

Back 49

Common Criteria assurance level Eal 1

Front 50

structurally tested

Back 50

Common Criteria assurance level EAL2

Front 51

Methodically tested and checked

Back 51

Common Criteria assurance level EAL3

Front 52

methodically designed, tested and reviewed

Back 52

Common Criteria assurance level EAL4

Front 53

Semiformally designed and tested

Back 53

Common Criteria assurance level EAL5

Front 54

Semiformally verified design and tested

Back 54

Common Criteria assurance level EAL6

Front 55

Formally verified design and tested

Back 55

Common Criteria assurance level EAL7

Front 56

What are the three conditions that must be met by the reference monitor?

Back 56

Isolation, completeness and verifiability

Front 57

concerned with integrity and controls access to objects based on a comparison of the security level of the subject to that of the object.

Back 57

Biba model

Front 58

Concerned with confidentiality and controls access to objects based on a comparison of the clearence level of the subject to the classification level of the object.

Back 58

Bell-LaPaula model

Front 59

Whagt does the simple security (ss) property mean in the Bell-LaPadula model?

Back 59

No read up

Front 60

Establishes the minimal national standards for certifying and accrediting national security systems?

Back 60

NIACAP

Front 61

A mechanism that enforces the authorized access relationships between subjects and objects is known as:

Back 61

The Reference monitor

Front 62

At what Orange Book evaluation levels are configuration management required?

Back 62

B2 and above

Front 63

What access control technique is also known as multilevel security?

Back 63

Mandatory access control

Front 64

Which of the following uses protection profiles and security targets?

Back 64

International Standard 15408

Front 65

The Orange Book does NOT cover:

Back 65

Integrity

Front 66

Which Orange book security rating introduces security labels?

Back 66

B1

Front 67

Trusted Distribution is required at what Orange Book evaluation level?

Back 67

A1

Front 68

What does the simple integrity axiom mean in the Biba model?

Back 68

No read down

Front 69

Which TCSEC class specifies discretionary protection?

Back 69

C1

Front 70

Which of the following classes is defined in the TCSEC (Orange Book) as discretionary protection?

Back 70

C

Front 71

Biba-Subject cannot send messages (logical request for service) to subjects of higher integrity

Back 71

Invocation property

Front 72

Simple

Back 72

Read

Front 73

Star

Back 73

Write

Front 74

Which model addresses all three integrity goals?

Back 74

Clark and Wilson

Front 75

Well formed transaction

Back 75

Clark and Wilson

Front 76

Which security model includes Separation of duty?

Back 76

Clarke and Wilson

Front 77

Access Triple

Back 77

Clark and Wilson
Subject, program, object

Front 78

State machine model specifying modes of access
Subject to subject, subject to object, One row per subject, one column per subject and object

Back 78

Access Control Matrix

Front 79

Controls are put into place to prevent a conflict of interest

Back 79

Brewer and Nash Model-Chinese Wall security policy

Front 80

Control changing permissions for access

Back 80

Brewer and Nash

Front 81

ACID Test

Back 81

Atomicity-either all changes take effect or none do
Consistency-a transaction is allowed only if it meets owner/system defined integrity constraints
Isolation-the results of the transaction are not visible until the transaction is complete
Durability-a completed transaction is permanent.

Front 82

uses a knowledge base and a set of algorithms and/or rules that infer new facts from knowledge and incoming data

Back 82

Expert System Approach

Front 83

What can best be described as a domain of trust that shares a single security policy and single management?

Back 83

A security domain

Front 84

Which of the following uses protection profiles and security targets?
ITSEC
TCSEC
CTCPEC
International Standard 15408

Back 84

International Standard 15408

Front 85

What does it mean to say that sensitivity labels are "incomparable"?

The number of classification in the two labels is different.

Neither label contains all the classifications of the other.

the number of categories in the two labels are different.

Neither label contains all the categories of the other.

Back 85

Neither label contains all the categories of the other.

Front 86

Controlled Security Mode is also known as:
Multilevel Security Mode
Compartmented security mode
Dedicated Security Mode
System-high Security Mode

Back 86

Compartmented security mode

Front 87

What is another name for the Orange Book

Back 87

The Trusted Computer System Evaluation Criteria (TCSEC)

Front 88

Which of the following was developed by the National Computer Security Center (NCSC)?
TCSEC
ITSEC
DIACAP
NIACAP

Back 88

TCSEC

Front 89

Which security model ensures that actions that take place at a higher security level do not affect actions that take place at a lower level?
The Bell-LaPadula model
The information flow model
The noninterference model
The Clark-Wilson model

Back 89

The noninterference model

Front 90

What is defined as the hardware, firmware and software elements of a trusted computing base that implement the reference monitor concept?
The reference monitor
Protection rings
A security kernel
A protection domain

Back 90

A security kernel

Front 91

What is necessary for a subject to have read access to an object in a Multi-Level Security Policy?
The subject's sensitivity label must dominate the object's sensitivity label.
The subject's sensitivity label subordinates the object's sensitivity label.
The subject's sensitivity label is subordinated by the object's sensitivity label.
The subject's sensitivity label is dominated by the object's sensitivity label.

Back 91

›The subject's sensitivity label must dominate the object's sensitivity label.

Front 92

Which TCSEC (Orange Book) rating or level requires the system to clearly identify functions of the security administrator to perform security-related functions?
C2
B1
B2
B3

Back 92

›B3

Front 93

Which of the following security models does NOT concern itself with the flow of data?
The information flow model
The Biba model
The Bell-LaPadula model
The noninterference model

Back 93

›The noninterference model

Front 94

A mechanism that enforces the authorized access relationships between subjects and objects is known as:
the reference monitor.
discretionary access control.
trusted kernel.
mandatory access control.

Back 94

›the reference monitor.