Corporate Security Chap 7

A product that has been evaluated as providing discretionary protection according to the TCSEC would have what classification rating in Common Criteria?

• EAL 1

• EAL 2

• EAL 5

• EAL 7

What are the distinguishing factors between a product with a ITSEC rating of F6 and one with a rating of E2?

• Architecture features

• Protection features

• Verified protection

• security policies

Which of the following is NOT a requirement of a B3 TCSEC rating?

• Security administrator role defined

• Monitors events and notifies appropriate personnel

• Exhibits trusted recovery

• Uses formal methods and procedures

Companies should follow certain steps in selecting and implementing a new computer product. Which of the following sequences is ordered correctly?

• Evaluation, accreditation, certification

• Evaluation, certification, accreditation

• Certification, evaluation, accreditation

• Certification, accreditation, evaluation

A product that has been evaluated as providing methodically tested and checked assurance according to the Common Criteria would have what classification in TCSEC?

• A1

• B2

• D

• C2

Which TCSEC publication addresses computer systems for government and military use?

• Red book

• Pink book

• Orange book

• Green book

Which of the following is NOT a requirement of a EAL 6 Common Criteria rating?

• Security administrator role defined

• Monitors events and notifies appropriate personnel

• Uses formal methods and procedures

• Exhibits trusted recovery

What is the similar rating of Common Criteria with the F4+E4 of ITSEC?

• EAL 7

• EAL 6

• EAL 5

• EAL 4