What should be the size of a Trusted Computer Base?

A.
Small – in order to permit it to be implemented in all critical system components without using
excessive resources.

B.
Small – in order to facilitate the detailed analysis necessary to prove that it meets design
requirements.

C.
Large – in order to accommodate the implementation of future updates without incurring the
time and expense of recertification.

D.
Large – in order to enable it to protect the potentially large number of resources in a typical
commercial system environment.

Explanation:
“It must be small enough to be able to be tested and verified in a complete and comprehensive
manner.” Shon Harris All-In-One CISSP Certification Guide pg. 232-233.