Quiz
Chapter 13 Quiz
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (30)
1What is the purpose of the concept of “separation of duties” as used in some security models?
- ATo allow system administrators to have powers that regular users do not.
- BTo permit different user groups to have different levels of file access.
- CTo prevent authorized users from making improper modifications to data.
- DTo allow multiple users to access the same file at the same to perform different file updates.
2To what does the “Discretionary Protection” category refer?
- ATCBs with some file and device protection
- BWindows 2000 and Windows XP systems
- CTCBs with secure login systems
- DAuditing systems
3What is a Chinese wall, in the context of business practices?
- AAn A2-rated network perimeter
- BA barrier to information flow between organizations
- CA highly secure network perimeter
- DA barrier to information flow within an organization
4Mandatory access over all objects and devices is required at what level of security rating?
- AA2
- BB2
- CC2
- DB1
5If you wanted to study methods for verification of trusted systems, which book in the Rainbow series should you consult?
- ARed Book
- BBlue Book
- CPurple Book
- DOrange Book
6Which of the following models focuses on any transaction that changes the system’s state?
- ABell-LaPadula
- BBiba Integrity
- CITSEC
- DClark-Wilson
7Which book in the Rainbow series would you consult to look up a particular security term?
- AAqua Book
- BRed Book
- COrange Book
- DPink Book
8What division designation is given to a system with a classification so low it is not rated?
- AA - Unrated
- BD - Unrated
- CD - Minimal Protection
- DN - Not Rated
9What is the common name given to one of a series of color-coded books that outlines criteria for rating various operating systems?
- AOrange Book
- BRed Book
- CBlue Book
- DBlack Book
10Of the following, which has the highest security level?
- AFederal XTS-300
- BHoneywell SCOMP
- CHoneywell Multics
- DDigital SEVMS
11To which of the following does the C2 rating apply?
- ANetworks with appropriate security
- BWindows 2000
- CHoneywell Multics
- DMost firewalls
12Which operating systems qualify for an A2 rating?
- ATrusted XENIX
- BWindows 2000
- Cnone
- DHoneywell SCOMP
13Which of the following models considers a system to be in a secure state when there is no instance of security breach at the time of state transition?
- AChinese Wall
- BState Machine
- CBell-LaPadula
- DClark-Wilson
14Which of the following models is based on the concept of conflict of interest?
- ABiba Integrity
- BChinese Wall
- CBell-LaPadula
- DState Machine
15The Orange Book is primarily used for what purpose?
- AAssessing the security of firewalls
- BEvaluating programs for security levels
- CEvaluating overall security of networks
- DEvaluating security of operating systems
16What does the concept of “write up” mean?
- ALogging transactions
- BSending data to an object at a higher security level
- CWriting files to a secure location
- DDocumenting security flaws
17What level of protection is available in IBM OS/400, Windows XP, and Novell Netware?
- AC2 - Controlled Access Protection
- BC1 - Discretionary Security Protection
- CD - Minimal Protection
- DB1 - Labeled Security Protection
18Which was NOT part of the origins of the Common Criteria?
- ACTCPEC (Canadian Trusted Computer Product Evaluation Criteria
- BITSEC (Information Technology Security Evaluation Criteria
- CThe Orange Book
- DSANS International Guidelines for Computer Security
19Which is true about the Department of Defense security categories?
- AThey provide information on securing computer installations.
- BThey are designated by a letter ranging from D to A.
- CThey are classified documents.
- DThey are used to evaluate network security capabilities.
20Which variation of the Unix operating system provides the higher security level?
- AHP-UX-BLS
- BLinux Fedora
- CMultics
- DTrusted Xenix
21Which is a security model using the concepts of subjects, objects, and programs?
- AState Machine Model
- BBell-LaPadula Model
- CBiba Integrity Model
- DClark-Wilson Model
22Who publishes a series of color-coded books on information security?
- ADepartment of Defense
- BSANS Institute
- CMicrosoft
- DTrusted Computer Systems
23What is an EAL?
- AExecution assurance load
- BEvaluation assurance level
- CEvaluation authority level
- DExecution authority level
24What Canadian standard was used as one basis for the Common Criteria?
- AOrange Book
- BCanSec
- CITSEC
- DCTCPEC
25To what does the term trusted computing base refer?
- AA system of numerous domains participating in two-way trust arrangements
- BA completely unified structure of protection mechanisms within a computer system
- CA server that maintains secure access
- DA base station facility for secure wireless computing
26What is the purpose of the Orange Book statement “All authorizations to the information contained within a storage object shall be revoked prior to initial assignment, allocation, or reallocation…” as used within level C?
- AIt prevents a user with lower security access from logging on after someone else and accessing materials for which they lack access rights.
- BIt permits a user with lower security access to log on after someone else and access materials for which they lack access rights.
- CIt permits security access to be revoked or stopped whenever the system identifies inappropriate attempts to access materials for which they lack access rights.
- DIt permits remote access limits to be implemented as needed.
27Which is a security model originally designed in anticipation of United States military applications?
- ABiba Integrity Model
- BState Machine Model
- CChinese Wall Model
- DBell-LaPadula Model
28Operating systems such as HP-UX BLS, Cray Research Trusted Unicos 8.0, and Digital SEVMS all are within which security division?
- AC - Discretionary Protection
- BA - Verified Protection
- CB - Mandatory Protection
- DD - Minimal Protection
29Which of the following subject-object models introduced the element of programs?
- AClark-Wilson
- BBell-LaPadula
- CBiba Integrity
- DChinese Wall
30The Common Criteria applies mostly to what types of system?
- AHome user systems
- BCommercial systems
- CBusiness systems
- DMilitary/intelligence systems
Informationen
- Beschreibung
- Information Technology Quiz am Chapter 13 Quiz, erstellt von Mary Sunseri am 29/04/2018.
- Autor
- Mary Sunseri
- Sprache
- English
- Aufrufe
- 7
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz