Level B2 would incorporate B1 labels, but B2 also includes system design. System design covers not only the data but also the storage devices on which the data would be stored, this is to protect against covert channels.
The TCB shall support the assignment of minimum and maximum security levels to all attached physical devices. These security levels shall be used by the TCB to enforce constraints imposed by the physical environments in which the devices are located.
The following answers are incorrect:
C2. Level C2 does not require the protection of labels. That is not introduced until Level B.
B1.Level B1 is the first to require labels but it pertains to data labeling and the subjects and objects that need access to it.
D6.Level D6 is a distractor as there is are no classes assigned to D.
One of the first accepted evaluation standards was the Trusted Computer Security Evaluation Criteria or TCSEC.
The Orange Book was part of this standard that defines four security divisions consisting of seven different classes for security ratings. The lowest class offering the least protection is D - Minimal protection. The highest classification would be A1 offering the most secure environment. As you go to the next division and class you inherit the requirements of the
lower levels. So, for example C2 would also incorporate the requirements for C1 and D.
Modified 6/06/2007- J. Hajec; 4/14/2008 - S. Stone. QA checked by M. Zagorski
Contributors: don murdoch, Scot Hartman, Richard Stephens, Jonathan Guymon
My doubt:System Design is included in B1 and not B2 (as shown in the attached matrix taken from Quiz Engine Qs. 802). The answer should be B2 not because of System Design but because Device Labels are defined under B2 (as shown in the attached matrix taken from Quiz Engine Qs. 802). Please let me know if my understanding is correct?
Note: I had to include the attachment since I was unable to paste the TCSEC matrix in the body of the mail
I have some doubts regarding some cccure Quiz questions and concepts mentioned below. Would really appreciate it if you
could take out some time and help me with them. Request you to please provide a quick reply as I need to appear for the