Which of the following describes the rules that need to be implemented to ensure that the security requirements are met?

A.
Security kernel

B.
Security policy

C.
Security model

D.
Security reference monitor

Explanation:
B: Security policy documents the security requirements of an organization. Subsequently, a security model is a specification that describes the rules to be implemented to support and enforce the security policy. While the security policy provides the What requirements needs to be met, the security model provides HOW (the rules by which) the requirements will be met. The part of the operating system where security features are located is the security kernel. Security reference monitor is the tamperproof module that controls the access request of software to either the data or the system. Page 682.