Question 1

A subject is said to have a security _________ of a given level.

Accepted Answer

The answer of A subject is said to have a...

Question 2

_________ rules are built-in system security mechanisms that achieve the objectives of the certification rules.

Accepted Answer

The answer of _________ rules are built-in system security mechanisms...

Question 3

Inserting a new row at a lower level without modifying the existing row at the higher level is known as ________ .
A)polyinstantiation
B)ds-property
C)trust
D)MAC

Accepted Answer

The answer of Inserting a new row at a lower...

Question 4

"No read up" is also referred to as the _________ property.

Accepted Answer

The answer of "No read up" is also referred to...

Question 5

________ is a process that ensures a system is developed and operated as intended by the system's security policy.
A)Trust
B)Assurance
C)Evaluation
D)Functionality

Accepted Answer

The process described is known as "Assurance." This term encompasses various actions to ensure that a system (or product) meets its intended security requirements and operates as intended. It provides confidence to the system owner that the security controls are effective and correctly implemented. Trust is a related concept, but it refers to the reliance on a system or entity to behave in a certain way based on past experience or reputation. Evaluation is a step in the assurance process, where the system is tested against established criteria or standards. Functionality, while important, is not the focus of the assurance process, which concerns itself primarily with the security aspects of a system.

Question 6

The ________ access mode allows the subject neither read nor write access to the object but may invoke the object for execution.

Accepted Answer

The answer of The ________ access mode allows the subject...

Question 7

The ________ is the government agency that monitors the evaluation process.
A)sponsor
B)certifier
C)evaluator
D)developer

Accepted Answer

The certifier is responsible for monitoring the evaluation process to ensure it meets the necessary standards and criteria. The sponsor is the agency or organization that initiates the evaluation, the evaluator is responsible for conducting the evaluation, and the developer is responsible for creating the program or product being evaluated.

Question 8

A _______ is a collection of requirements that share a common focus or intent.
A)trust
B)family
C)class
D)component

Accepted Answer

The answer of A _______ is a collection of requirements...

Question 9

_________ is assurance that a system deserves to be trusted such that the trust can be guaranteed in some convincing way such as through formal analysis or code review.
A)TCB
B)Trustworthiness
C)Trusted computing
D)TPM

Accepted Answer

Trustworthiness is the property of a system that assures it can be trusted. This can be achieved through various means such as formal verification, code review, and other security testing techniques. TCB refers to the Trusted Computing Base, which is the set of components in a system that are used for enforcing the security policy. Trusted Computing refers to a set of technologies that aim to provide trust in computing systems, while TPM (Trusted Platform Module) is a hardware component used for storing cryptographic keys and other sensitive data. Therefore, while these other options may be related to trust and security, the best choice for this definition is Trustworthiness.

Question 10

When multiple categories or levels of data are defined,the requirement is referred to as __________ security.

Accepted Answer

The answer of When multiple categories or levels of data...

Question 11

_________ rules are security policy restrictions on the behavior of IVPs and TPs.

Accepted Answer

The answer of _________ rules are security policy restrictions on...

Question 12

"An individual (or role)may grant to another individual (or role)access to a document based on the owner's discretion,constrained by the MAC rules" describes the _________.
A)ss-property
B)ds-property
C)*-property
D)cc-property

Accepted Answer

The answer of "An individual (or role)may grant to another...

Question 13

The _______ is a hardware module that is at the heart of a hardware/software approach to trusted computing.
A)BLP
B)TC
C)CC
D)TPM

Accepted Answer

The Trusted Platform Module (TPM) is a hardware module that provides a secure cryptographic foundation for a trusted computing platform. It stores cryptographic keys, generates digital signatures, and can be used to securely authenticate hardware and software components. It is a key component in the hardware/software approach to trusted computing.

Question 14

The _________ model is aimed at commercial rather than military applications and closely models real commercial operations.

Accepted Answer

The answer of The _________ model is aimed at commercial...

Question 15

________ is when a new document consolidates information from a range of sources and levels so that some of that information is now classified at a higher level than it was originally.
A)Classification creep
B)Trusted platform
C)Common criteria
D)Polyinstantiation

Accepted Answer

Classification creep refers to the situation in which a new document consolidates information from a range of sources and levels so that some of that information is now classified at a higher level than it was originally. This can result in over-classification of information and reduce access to information that should be available for public use.

Question 16

The _________ Model was developed for commercial applications in which conflicts of interest can arise.
A)Biba
B)Clark-Wilson Integrity
C)Bell-Lapadula
D)Chinese Wall

Accepted Answer

The Chinese Wall model was developed specifically for commercial applications to prevent conflicts of interest in situations where a single entity has access to sensitive information from multiple clients. It establishes barriers between information and prevents information flow between conflicting domains. The other models listed were not specifically designed for commercial applications. Biba and Bell-Lapadula are primarily used for security classifications and access control policies, while Clark-Wilson Integrity is designed to ensure consistency and integrity of data within a system.

Question 17

__________ data are data that may be derived from corporate data but that cannot be used to discover the corporation's identity.
A)Reference
B)Trust
C)Sanitized
D)MAC

Accepted Answer

Sanitized data refers to data that has been stripped of any identifying information that could link it back to the corporation it came from. This allows analysts to work with the data without compromising the privacy or security of the corporation.

Question 18

The _________ model is intended to deal with the case in which there is data that must be visible to users at multiple or all security levels but should only be modified in controlled ways by authorized agents.

Accepted Answer

The answer of The _________ model is intended to deal...

Question 19

The __________ is a controlling element in the hardware and operating system of a computer that regulates the access of subjects to objects on the basis of security parameters of the subject and object.

Accepted Answer

The answer of The __________ is a controlling element in...

Question 20

An object is said to have a security ________ of a given level.

Accepted Answer

The answer of An object is said to have a...

Quiz 13: Trusted Computing and Multilevel Security

A subject is said to have a security _________ of a given level.

_________ rules are built-in system security mechanisms that achieve the objectives of the certification rules.

Inserting a new row at a lower level without modifying the existing row at the higher level is known as ________ .

"No read up" is also referred to as the _________ property.

________ is a process that ensures a system is developed and operated as intended by the system's security policy.

The ________ access mode allows the subject neither read nor write access to the object but may invoke the object for execution.

The ________ is the government agency that monitors the evaluation process.

A _______ is a collection of requirements that share a common focus or intent.

_________ is assurance that a system deserves to be trusted such that the trust can be guaranteed in some convincing way such as through formal analysis or code review.

When multiple categories or levels of data are defined,the requirement is referred to as __________ security.

_________ rules are security policy restrictions on the behavior of IVPs and TPs.

"An individual (or role) may grant to another individual (or role) access to a document based on the owner's discretion,constrained by the MAC rules" describes the _________.

The _______ is a hardware module that is at the heart of a hardware/software approach to trusted computing.

The _________ model is aimed at commercial rather than military applications and closely models real commercial operations.

________ is when a new document consolidates information from a range of sources and levels so that some of that information is now classified at a higher level than it was originally.

The _________ Model was developed for commercial applications in which conflicts of interest can arise.

__________ data are data that may be derived from corporate data but that cannot be used to discover the corporation's identity.

The _________ model is intended to deal with the case in which there is data that must be visible to users at multiple or all security levels but should only be modified in controlled ways by authorized agents.

The __________ is a controlling element in the hardware and operating system of a computer that regulates the access of subjects to objects on the basis of security parameters of the subject and object.

An object is said to have a security ________ of a given level.