Exam SSCP topic 1 question 44 discussion

Actual exam question from ISC's SSCP

Question #: 44
Topic #: 1

[All SSCP Questions]

Which of the following classes is the first level (lower) defined in the TCSEC (Orange Book) as mandatory protection?

A. B
B. A
C. C
D. D

Show Suggested Answer

Suggested Answer: A 🗳️
B level is the first Mandatory Access Control Level.
First published in 1983 and updated in 1985, the TCSEC, frequently referred to as the Orange Book, was a United States Government Department of Defense
(DoD) standard that sets basic standards for the implementation of security protections in computing systems. Primarily intended to help the DoD find products that met those basic standards, TCSEC was used to evaluate, classify, and select computer systems being considered for the processing, storage, and retrieval of sensitive or classified information on military and government systems. As such, it was strongly focused on enforcing confidentiality with no focus on other aspects of security such as integrity or availability. Although it has since been superseded by the common criteria, it influenced the development of other product evaluation criteria, and some of its basic approach and terminology continues to be used.

Reference used for this question:
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition ((ISC)2 Press) (Kindle Locations 17920-17926). Auerbach
Publications. Kindle Edition.
and
THE source for all TCSEC "level" questions: http://csrc.nist.gov/publications/secpubs/rainbow/std001.txt (paragraph 3 for this one)

by DefenestrateIT at Nov. 17, 2023, 10:35 a.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!