The Common Criteria terminology for the degree of examination of the product to be tested is:

A.
Functionality (F)

B.
Target of Evaluation (TOE)

C.
Evaluation Assurance Level (EAL)

D.
Protection Profile (PP)

Explanation:
The Evaluation Assurance Levels range from EA1 (functional testing) to EA7 (detailed testing and
formal design verification). The Target of Evaluation (TOE), answer a, refers to the product to be
tested. Answer b, Protection Profile (PP), is an implementationindependent specification of the
security requirements and protections of a product that could be built. A Security Target (ST) is a
listing of the security claims for a particular IT security product. Also, the Common Criteria describes
an intermediate grouping of security requirement components as a package. Functionality, answer c,
refers to Part 2 of the Common Criteria that contains standard and well-understood functional
security requirements for IT systems.