Hệ thống chứng nhận là gì? A. chính thức chấp nhận một hệ thống quy định cấu hình B. Một đánh giá về mặt kỹ thuật của từng phần của một hệ thống máy tính để đánh giá sự tuân thủ với Nguyên tắc của mô hình bảo mật | 388 Chapter 12 Principles of Security Models Review Questions 1. What is system certification A. Formal acceptance of a stated system configuration B. A technical evaluation of each part of a computer system to assess its compliance with security standards C. A functional evaluation of the manufacturer s goals for each hardware and software component to meet integration standards D. A manufacturer s certificate stating that all components were installed and configured correctly 2. What is system accreditation A. Formal acceptance of a stated system configuration B. A functional evaluation of the manufacturer s goals for each hardware and software component to meet integration standards C. Acceptance of test results that prove the computer system enforces the security policy D. The process to specify secure communication between machines 3. What is a closed system A. A system designed around final or closed standards B. A system that includes industry standards C. A proprietary system that uses unpublished protocols D. Any machine that does not run Windows 4. Which best describes a confined process A. A process that can run only for a limited time B. A process that can run only during certain times of the day C. A process that can access only certain memory locations D. A process that controls access to an object 5. What is an access object A. A resource a user or process wishes to access B. A user or process that wishes to access a resource C. A list of valid access rules D. The sequence of valid access types Review Questions 389 6. What is a security control A. A security component that stores attributes that describe an object B. A document that lists all data classification types C. A list of valid access rules D. A mechanism that limits access to an object 7. What does IPSec define A. All possible security classifications for a specific configuration B. A framework for setting up a secure communication channel C. The valid transition states in the Biba model D.
