Quiz
Chapter 13 Quiz
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (30)
1What is the purpose of the concept of “separation of duties” as used in some security models?
- ATo allow system administrators to have powers that regular users do not.
- BTo permit different user groups to have different levels of file access.
- CTo prevent authorized users from making improper modifications to data.
- DTo allow multiple users to access the same file at the same to perform different file updates.
2To what does the “Discretionary Protection” category refer?
- ATCBs with some file and device protection
- BWindows 2000 and Windows XP systems
- CTCBs with secure login systems
- DAuditing systems
3What is a Chinese wall, in the context of business practices?
- AAn A2-rated network perimeter
- BA barrier to information flow between organizations
- CA highly secure network perimeter
- DA barrier to information flow within an organization
4Mandatory access over all objects and devices is required at what level of security rating?
- AA2
- BB2
- CC2
- DB1
5If you wanted to study methods for verification of trusted systems, which book in the Rainbow series should you consult?
- ARed Book
- BBlue Book
- CPurple Book
- DOrange Book
6Which of the following models focuses on any transaction that changes the system’s state?
- ABell-LaPadula
- BBiba Integrity
- CITSEC
- DClark-Wilson
7Which book in the Rainbow series would you consult to look up a particular security term?
- AAqua Book
- BRed Book
- COrange Book
- DPink Book
8What division designation is given to a system with a classification so low it is not rated?
- AA - Unrated
- BD - Unrated
- CD - Minimal Protection
- DN - Not Rated
9What is the common name given to one of a series of color-coded books that outlines criteria for rating various operating systems?
- AOrange Book
- BRed Book
- CBlue Book
- DBlack Book
10Of the following, which has the highest security level?
- AFederal XTS-300
- BHoneywell SCOMP
- CHoneywell Multics
- DDigital SEVMS
11To which of the following does the C2 rating apply?
- ANetworks with appropriate security
- BWindows 2000
- CHoneywell Multics
- DMost firewalls
12Which operating systems qualify for an A2 rating?
- ATrusted XENIX
- BWindows 2000
- Cnone
- DHoneywell SCOMP
13Which of the following models considers a system to be in a secure state when there is no instance of security breach at the time of state transition?
- AChinese Wall
- BState Machine
- CBell-LaPadula
- DClark-Wilson
14Which of the following models is based on the concept of conflict of interest?
- ABiba Integrity
- BChinese Wall
- CBell-LaPadula
- DState Machine
15The Orange Book is primarily used for what purpose?
- AAssessing the security of firewalls
- BEvaluating programs for security levels
- CEvaluating overall security of networks
- DEvaluating security of operating systems
16What does the concept of “write up” mean?
- ALogging transactions
- BSending data to an object at a higher security level
- CWriting files to a secure location
- DDocumenting security flaws
17What level of protection is available in IBM OS/400, Windows XP, and Novell Netware?
- AC2 - Controlled Access Protection
- BC1 - Discretionary Security Protection
- CD - Minimal Protection
- DB1 - Labeled Security Protection
18Which was NOT part of the origins of the Common Criteria?
- ACTCPEC (Canadian Trusted Computer Product Evaluation Criteria
- BITSEC (Information Technology Security Evaluation Criteria
- CThe Orange Book
- DSANS International Guidelines for Computer Security
19Which is true about the Department of Defense security categories?
- AThey provide information on securing computer installations.
- BThey are designated by a letter ranging from D to A.
- CThey are classified documents.
- DThey are used to evaluate network security capabilities.
20Which variation of the Unix operating system provides the higher security level?
- AHP-UX-BLS
- BLinux Fedora
- CMultics
- DTrusted Xenix
21Which is a security model using the concepts of subjects, objects, and programs?
- AState Machine Model
- BBell-LaPadula Model
- CBiba Integrity Model
- DClark-Wilson Model
22Who publishes a series of color-coded books on information security?
- ADepartment of Defense
- BSANS Institute
- CMicrosoft
- DTrusted Computer Systems
23What is an EAL?
- AExecution assurance load
- BEvaluation assurance level
- CEvaluation authority level
- DExecution authority level
24What Canadian standard was used as one basis for the Common Criteria?
- AOrange Book
- BCanSec
- CITSEC
- DCTCPEC
25To what does the term trusted computing base refer?
- AA system of numerous domains participating in two-way trust arrangements
- BA completely unified structure of protection mechanisms within a computer system
- CA server that maintains secure access
- DA base station facility for secure wireless computing
26What is the purpose of the Orange Book statement “All authorizations to the information contained within a storage object shall be revoked prior to initial assignment, allocation, or reallocation…” as used within level C?
- AIt prevents a user with lower security access from logging on after someone else and accessing materials for which they lack access rights.
- BIt permits a user with lower security access to log on after someone else and access materials for which they lack access rights.
- CIt permits security access to be revoked or stopped whenever the system identifies inappropriate attempts to access materials for which they lack access rights.
- DIt permits remote access limits to be implemented as needed.
27Which is a security model originally designed in anticipation of United States military applications?
- ABiba Integrity Model
- BState Machine Model
- CChinese Wall Model
- DBell-LaPadula Model
28Operating systems such as HP-UX BLS, Cray Research Trusted Unicos 8.0, and Digital SEVMS all are within which security division?
- AC - Discretionary Protection
- BA - Verified Protection
- CB - Mandatory Protection
- DD - Minimal Protection
29Which of the following subject-object models introduced the element of programs?
- AClark-Wilson
- BBell-LaPadula
- CBiba Integrity
- DChinese Wall
30The Common Criteria applies mostly to what types of system?
- AHome user systems
- BCommercial systems
- CBusiness systems
- DMilitary/intelligence systems
Information
- Description
- Information Technology Quiz on Chapter 13 Quiz, created by Mary Sunseri on 29/04/2018.
- Author
- Mary Sunseri
- Language
- English
- Views
- 7
- Tags
- Rating
- No ratings yet Rate this quiz