security mode of operation where the system operates at the highest security classification level, all users have the necessary clearance, access to all system components, but not all users have the need-to-know for all information? Dedicated security mode System high-security mode security mode Compartmented security mode Domain: Security Architecture & Design Best answer: B In system high mode, all users have the required security clearance, can access to all system components, but do not have the need-to-know for all information within the system. security mode of operation allows system to operate and process information at multiple classification levels? Dedicated security mode System high-security mode Multi-level security mode Compartmented security mode Domain: Security Architecture & Design Best answer: C In multi-level security (MLS) mode of operation, the system that has implemented Bell-LaPadula security model can operate and process information at multiple classification levels.
is the security architecture concept that describes an abstract machine that mediates all subjects’ accesses to objects? Trusted computing base (TCB) Clark-Wilson security model Reference monitor Security kernel Domain: Security Architecture & Design Best answer: C Reference monitor is a concept performed by a reference validation mechanism. Trusted computing base (TCB) is the totality of protection mechanisms that focuses on meeting the security objective of confidentiality and integrity. Security kernel is a software mechanism that is an implementation of reference monitor and is a part of TCB. is the information security system design concept that consists of hardware, firmware, software, data processes, and transports for meeting the confidentiality and integrity security objectives? Trusted computing base (TCB) Reference monitoring mechanism Security kernel Rings of protection Domain: Security Architecture & Design Best answer: A Trusted computing base (TCB) is the totality of protection mechanisms that focuses on meeting the security objective of confidentiality and integrity. Reference monitoring mechanism does not specify the security policy or mechanisms. And it does not specify the security objectives. Security kernel is a software mechanism that is an implementation of reference monitor and is a part of TCB.
Common Criteria, what is the “solution neutral” specification that explains the security needs? Security Target (ST) Target of Evaluation (TOE) Protection Profile (PP) Evaluation Assurance (EAL) Domain: Security Architecture & Design Best answer: C Protection Profile (PP) is the “solution neutral” specification that explains the security needs. Security Target (ST) is a “product/solution-oriented” document, usually provided by solution vendors, to support the security evaluation. Target of Evaluation (TOE) is the product to be evaluated. Common Criteria, what is the assigned Evaluation Assurance Level (EAL) for the Target of Evaluation (TOE) that has been methodically designed, tested, and reviewed? EAL 7 EAL 6 EAL 5 EAL 4 Domain: Security Architecture & Design Best answer: D
IPv4, what class of IP address: 128.10.5.254 is in? Class A B C Class D Domain: Telecommunications & Network Security Best answer: B Class A: 1.0.0.0 – 127.255.255.255 Class B: 128.0.0.0 – 191.255.255.255 Class C: 192.0.0.0 – 223.255.255.255 D: 224.0.0.0 – 239.255.255.255 (Multicast) Class E: 240.0.0.0 – 254.255.255.255 (Experimental) IPv4, per RFC 1918, Address Allocation for Private Internets, which of the following is a private, (none Internet routable) IP address? 11.32.68.5 168.155.32.36 193.168.254.254 172.30.10.10 Domain: Telecommunications & Network Security Best answer: D Per RFC 1918, the following IP addresses are reserved as private IP addresses: Class A: 10.0.0.0 – 10.255.255.255 Class B: 172.16.0.0 – 172.31.255.255 Class C: 192.168.0.0 – 192.168.255.255