Which Orange book security rating introduces security labels?

A.
C2

B.
B1

C.
B2

D.
B3

Explanation:
Class (B1) or “Labeled Security Protection” systems require all the features required
for class (C2). In addition, an informal statement of the security policy model, data labeling, and
mandatory access control over named subjects and objects must be present. The capability must
exist for accurately labeling exported information. Any flaws identified by testing must be
removed.