Security Engineering

TCSEC provides levels of security that are classified in a hierarchical manner. Each level has a corresponding set of security requirements that must be met. To which of the following does Level A correspond?

• Mandatory protection
• Required protection
• Verified protection
• Validated protection

TCSEC offers numbered divisions of security that can occur in each category. With this in mind, which of the following represents the highest level of security?

• B2
• D2
• B1
• D1

Jim has been asked to assist with a security evaluation. He has heard other members of the teams talking about ‘‘TCB.’’ What does TCB stand for?

• Taking care of business
• Total computer base
• Trusted computer base
• Total communication bandwidth

Which of the following is not one of the valid states in which a CPU can operate?

• Processor
• Supervisor
• Problem
• Wait

Which organization began developing the Common Criteria (CC) standard in 1990?

• IEEE
• ISC2
• ISO
• NIST

Which security model uses security labels to grant access to objects through the use of transformation procedures?

• Biba
• Bell-LaPadula
• Trusted Computer System
• Clark-Wilson

Your CISSP study group is reviewing the Security Engineering domain in preparation for the exam. One of the members has a question. Which of the following is not one of the requirements for memory management?

• Processing
• Sharing
• Protection
• Relocation

Ted has been working with one of the contract programmers on a web-based application and comes to you with a question: What is a thread? What do you tell him?

• A thread is a set of instructions that the computer understands and processes in a virtual machine.
• A thread is a single sequential flow of control within a program.
• A thread is a highly privileged routine that is executed within a computer system.
• A thread is a program in execution that can communicate only with its controlling process.

During which of the following states does a CPU execute code or process application data?

• Processor
• Supervisor
• Problem
• Wait

TCSEC provides levels of security that are classified in a hierarchical manner. Each level has a corresponding set of security requirements that must be met. Which of the following does Level B correspond to?

• Mandatory protection
• Required protection
• Verified protection
• 2Validated protection