CISSP: Domain 3 (Questions and
Answers)
In Mandatory Access Control, sensitivity labels attached to an object contain what information?
A. The item's classification
B. The item's classification and category set
C. The item's category
D. The item's need-to-know – ANSWER – B. The item's classification and category set
The Orange Book outlines four hierarchical levels for categorizing security systems. Which
levels require mandatory protection?
A. A and B.
B. B and C.
C. A, B, and C.
D. B and D. – ANSWER – A. A and B.
What mechanism does a system use to compare the security labels of a subject and an object?
A. Validation Module.
B. Reference Monitor.
C. Clearance Check.
D. Security Module. – ANSWER – B. Reference Monitor.
What are the components of an object's sensitivity label?
A. A Classification Set and a single Compartment.
B. A single classification and a single compartment.
C. A Classification Set and user credentials.
D. A single classification and a Compartment Set. – ANSWER – D. A single classification and a
Compartment Set.
What does it mean to say that sensitivity labels are "incomparable"?
A. The number of classifications in the two labels is different.
B. Neither label contains all the classifications of the other.
C. The number of categories in the two labels is different.
D. Neither label contains all the categories of the other. – ANSWER – D. Neither label contains
all the categories of the other.
Per the Orange Book, what are the two types of system assurance?
A. Operational Assurance and Architectural Assurance.
B. Design Assurance and Implementation Assurance.
C. Architectural Assurance and Implementation Assurance.
, D. Operational Assurance and Life-Cycle Assurance. – ANSWER – D. Operational Assurance
and Life-Cycle Assurance.
The Orange Book requires auditing mechanisms for systems evaluated at which levels?
A. C1 and above.
B. C2 and above.
C. B1 and above.
D. B2 and above. – ANSWER – B. C2 and above.
Which items are required for Life-Cycle Assurance?
A. System Architecture and Design specification.
B. Security Testing and Covert Channel Analysis.
C. Security Testing and Trusted Distribution.
D. Configuration Management and Trusted Facility Management. – ANSWER – C. Security
Testing and Trusted Distribution.
Memory management in TCSEC levels B3 and A1 may employ "data hiding." What does this
mean?
A. System functions are layered; no layer can reference data outside itself.
B. User processes cannot access auditing processes or their memory addresses.
C. Only security processes may write to ring-zero memory.
D. It is a form of strong encryption cipher. – ANSWER – A. System functions are layered; no
layer can reference data outside itself.
The Orange Book states: "Hardware and software features shall be provided that can be used to
periodically validate the correct operation of the on-site hardware and firmware elements of the
TCB." This requirement is formally named:
A. Security Testing.
B. Design Verification.
C. System Integrity.
D. System Architecture Specification. – ANSWER – C. System Integrity.
Which pair can serve as a covert channel?
A. Storage and timing.
B. Storage and low bits.
C. Storage and permissions.
D. Storage and classification. – ANSWER – A. Storage and timing.
Covert Channel Analysis is first mandated at which TCSEC rating?
A. C2 and above.
B. B1 and above.
C. B2 and above.
D. B3 and above. – ANSWER – C. B2 and above.
At which Orange Book levels are design specification and verification first required?
A. C1 and above.
Answers)
In Mandatory Access Control, sensitivity labels attached to an object contain what information?
A. The item's classification
B. The item's classification and category set
C. The item's category
D. The item's need-to-know – ANSWER – B. The item's classification and category set
The Orange Book outlines four hierarchical levels for categorizing security systems. Which
levels require mandatory protection?
A. A and B.
B. B and C.
C. A, B, and C.
D. B and D. – ANSWER – A. A and B.
What mechanism does a system use to compare the security labels of a subject and an object?
A. Validation Module.
B. Reference Monitor.
C. Clearance Check.
D. Security Module. – ANSWER – B. Reference Monitor.
What are the components of an object's sensitivity label?
A. A Classification Set and a single Compartment.
B. A single classification and a single compartment.
C. A Classification Set and user credentials.
D. A single classification and a Compartment Set. – ANSWER – D. A single classification and a
Compartment Set.
What does it mean to say that sensitivity labels are "incomparable"?
A. The number of classifications in the two labels is different.
B. Neither label contains all the classifications of the other.
C. The number of categories in the two labels is different.
D. Neither label contains all the categories of the other. – ANSWER – D. Neither label contains
all the categories of the other.
Per the Orange Book, what are the two types of system assurance?
A. Operational Assurance and Architectural Assurance.
B. Design Assurance and Implementation Assurance.
C. Architectural Assurance and Implementation Assurance.
, D. Operational Assurance and Life-Cycle Assurance. – ANSWER – D. Operational Assurance
and Life-Cycle Assurance.
The Orange Book requires auditing mechanisms for systems evaluated at which levels?
A. C1 and above.
B. C2 and above.
C. B1 and above.
D. B2 and above. – ANSWER – B. C2 and above.
Which items are required for Life-Cycle Assurance?
A. System Architecture and Design specification.
B. Security Testing and Covert Channel Analysis.
C. Security Testing and Trusted Distribution.
D. Configuration Management and Trusted Facility Management. – ANSWER – C. Security
Testing and Trusted Distribution.
Memory management in TCSEC levels B3 and A1 may employ "data hiding." What does this
mean?
A. System functions are layered; no layer can reference data outside itself.
B. User processes cannot access auditing processes or their memory addresses.
C. Only security processes may write to ring-zero memory.
D. It is a form of strong encryption cipher. – ANSWER – A. System functions are layered; no
layer can reference data outside itself.
The Orange Book states: "Hardware and software features shall be provided that can be used to
periodically validate the correct operation of the on-site hardware and firmware elements of the
TCB." This requirement is formally named:
A. Security Testing.
B. Design Verification.
C. System Integrity.
D. System Architecture Specification. – ANSWER – C. System Integrity.
Which pair can serve as a covert channel?
A. Storage and timing.
B. Storage and low bits.
C. Storage and permissions.
D. Storage and classification. – ANSWER – A. Storage and timing.
Covert Channel Analysis is first mandated at which TCSEC rating?
A. C2 and above.
B. B1 and above.
C. B2 and above.
D. B3 and above. – ANSWER – C. B2 and above.
At which Orange Book levels are design specification and verification first required?
A. C1 and above.
