Discuss ISC2 ISSMP Exam Topic 2 Question 9

Which of the following divisions of the Trusted Computer System Evaluation Criteria (TCSEC) is based on the Mandatory Access Control (MAC) policy?

ADivision A

BDivision D

CDivision B

DDivision C

Suggested Answer: C

Division B of the Trusted Computer System Evaluation Criteria (TCSEC) is based on the Mandatory Access Control (MAC) policy. Mandatory Access Control (MAC) is a model that uses a predefined set of access privileges for an object of the system. Access to an object is restricted on the basis of the sensitivity of the object and granted through authorization. Sensitivity of an object is defined by the label assigned to it. For example, if a user receives a copy of an object that is marked as 'secret', he cannot grant permission to other users to see this object unless they have the appropriate permission.

Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Lindy 11 months ago

Really? I didn't know MAC was tied to Division B.

Rosendo 12 months ago

Yup, Division B is all about Mandatory Access Control.

Maryln 12 months ago

Wait, are you sure? I thought it was Division A.

Carin 12 months ago

Totally agree, Division B is the right one!

Ernestine 1 year ago

It's Division B, based on MAC.

Catarina 1 year ago

I practiced a similar question, and I believe Division B is correct for MAC policies.

Elza 1 year ago

Division C seems to focus more on discretionary access controls, so I don't think that's it.

Lindsey 1 year ago

I remember studying that Division A is about the highest security levels, but I can't recall if it specifically mentions MAC.

Onita 1 year ago

I think Division B is the one related to Mandatory Access Control, but I'm not entirely sure.

Nelida 1 year ago

I think I know the answer, but I want to double-check my understanding. The question is asking about the types of data the developer should import, not the specific instances. So I'll need to carefully evaluate each option to determine the two best choices.

Malcom 1 year ago

This question seems a bit tricky. I'll need to carefully read through the options and think about the process of discovery after an Entry Point is configured.

Tandra 1 year ago

I'm a bit confused by this question. Doesn't an internal load balancer require the backend VMs to be in the same virtual network? I'll need to double-check the requirements.

Billi 1 year ago

Hmm, I'm not entirely sure about this one. I know we covered process monitoring in class, but I'm having trouble remembering the specific tool names. Let me think this through carefully.

ISC2 ISSMP Exam - Topic 2 Question 9 Discussion