2 cissp ® Official Study Guide Eighth Edition

Understand the security capabilities of information systems. 
Common security capabili-
ties include memory protection, virtualization, and Trusted Platform Module (TPM).
Written Lab
1.
Name at least seven security models.
2.
Describe the primary components of TCB.
3.
What are the two primary rules or principles of the Bell-LaPadula security model? 
Also, what are the two rules of Biba?
4.
What is the difference between open and closed systems and open and closed source?

---

314
Chapter 8 
■
Principles of Security Models, Design, and Capabilities
Review Questions
1.
What is system certification?
A.
Formal acceptance of a stated system configuration
B.
A technical evaluation of each part of a computer system to assess its compliance with 
security standards
C.
A functional evaluation of the manufacturer’s goals for each hardware and software 
component to meet integration standards
D.
A manufacturer’s certificate stating that all components were installed and configured 
correctly
2.
What is system accreditation?
A.
Formal acceptance of a stated system configuration
B.
A functional evaluation of the manufacturer’s goals for each hardware and software 
component to meet integration standards
C.
Acceptance of test results that prove the computer system enforces the security policy
D.
The process to specify secure communication between machines
3.
What is a closed system?
A.
A system designed around final, or closed, standards
B.
A system that includes industry standards
C.
A proprietary system that uses unpublished protocols