What Orange Book security rating is reserved for systems that have been evaluated but fail to meet the criteria and requirements of the higher divisions?

What Orange Book security rating is reserved for systems that have been evaluated but fail to meet the criteria and requirements of the higher divisions?
A .  A
B .  D
C .  E
D .  F

View Answer

Answer: B

Explanation: D or "minimal protection" is reserved for systems that were evaluated under the TCSEC but did not meet the requirements for a higher trust level.

A is incorrect. A or "Verified Protectection" is the highest trust level under the TCSEC. E is incorrect. The trust levels are A – D so "E" is not a valid trust level. F is incorrect. The trust levels are A – D so "F" is not a valid trust level.

CBK, pp. 329 – 330 AIO3, pp. 302 – 306