PrepAway - Latest Free Exam Questions & Answers

Who is responsible for implementing user clearances in …

Who is responsible for implementing user clearances in computer-based information systems at the B3 level of
the TCSEC rating?

PrepAway - Latest Free Exam Questions & Answers

A.
Security administrators

B.
Operators

C.
Data owners

D.
Data custodians

Explanation:
Typical security administrator functions may include the following:
Setting user clearances, initial passwords, and other security characteristics for new users
Changing security profiles for existing usersSetting or changing file sensitivity labels
Setting the security characteristics of devices and communications channels
Reviewing audit data
Incorrect Answers:
B: System operators provide day-to-day operations of computer systems. They do not perform the tasks listed
in the question.
C: Data owners are primarily responsible for determining the data’s sensitivity or classification levels. They can
also be responsible for maintaining the information’s accuracy and integrity. They do not perform the tasks
listed in the question.
D: Data custodians are delegated the responsibility of protecting data by its owner. They do not perform the
tasks listed in the question.

Krutz, Ronald L. and Russel Dean Vines, The CISSP Prep Guide: Mastering the Ten Domains of Computer
Security, John Wiley & Sons, New York, 2001, p. 211


Leave a Reply