2 cissp ® Official Study Guide Eighth Edition

D.
The software and controls that certify a security policy
10.
What is a security perimeter? (Choose all that apply.)
A.
The boundary of the physically secure area surrounding your system
B.
The imaginary boundary that separates the TCB from the rest of the system
C.
The network where your firewall resides
D.
Any connections to your computer system
11.
What part of the TCB concept validates access to every resource prior to granting the 
requested access?
A.
TCB partition
B.
Trusted library
C.
Reference monitor
D.
Security kernel
12.
What is the best definition of a security model?
A.
A security model states policies an organization must follow.
B.
A security model provides a framework to implement a security policy.
C.
A security model is a technical evaluation of each part of a computer system to assess 
its concordance with security standards.
D.
A security model is the process of formal acceptance of a certified configuration.

---

316
Chapter 8 
■
Principles of Security Models, Design, and Capabilities
13.
Which security models are built on a state machine model?
A.
Bell-LaPadula and Take-Grant
B.
Biba and Clark-Wilson
C.
Clark-Wilson and Bell-LaPadula
D.
Bell-LaPadula and Biba
14.
Which security model addresses data confidentiality?
A.
Bell-LaPadula
B.
Biba
C.
Clark-Wilson
D.
Brewer and Nash
15.
Which Bell-LaPadula property keeps lower-level subjects from accessing objects with a 
higher security level?