A government agency wants to ensure that the systems they use have been deployed as security
as possible. Which of the following technologies will enforce protections on these systems to
prevent files and services from operating outside of a strict rule set?
A.
Host based Intrusion detection
B.
Host-based firewall
C.
Trusted OS
D.
Antivirus
The correct answer is Trusted OS.
Trusted Operating System (TOS) generally refers to an operating system that provides sufficient support for multilevel security and evidence of correctness to meet a particular set of government requirements.The most common set of criteria for trusted operating system design is the Common Criteria combined with the Security Functional Requirements (SFRs) for Labeled Security Protection Profile (LSPP) and mandatory access control (MAC). The Common Criteria is the result of a multi-year effort by the governments of the U.S., Canada, United Kingdom, France, Germany, the Netherlands and other countries to develop a harmonized security criteria for IT products. (Source: https://en.wikipedia.org/wiki/Trusted_operating_system)
Incorrect answers:
A host-based firewall can allow or block traffic, but cannot prevent files and services from operating outside of a strict rule set.
A host-based IPS can prevent some things, but will not be able to apply the full set of requirements for a trusted OS.
An antivirus, while probably a requirement of a trusted OS, does not enforce anything.
7
0