The concept that all accesses must be meditated, protected from modification, and verifiable as
correct is the concept of

A.
Secure model

B.
Security locking

C.
Security kernel

D.
Secure state

Explanation:
A security kernel is defined as the hardware, firmware, and software elements of a trusted
computing base that implements the reference monitor concept. A reference monitor is a system
component that enforces access controls on an object. Therefore, the reference monitor concept is
an abstract machine that mediates all access of subjects to objects. The Security Kernel must:

Mediate all accesses
Be protected from modification
Be verified as correct.
-Ronald Krutz The CISSP PREP Guide (gold edition) pg 262