Which of the following statements pertaining to the security kernel is incorrect?

What is a PRIMARY reason for designing the security kernel to be as small as possible?

Which of the following implements the authorized access relationship between subjects and
objects of a system?

The concept that all accesses must be meditated, protected from modification, and verifiable as
correct is the concept of

What is an error called that causes a system to be vulnerable because of the environment in which
it is installed?

Which of the following ensures that security is not breached when a system crash or other system
failure occurs?

What type of subsystem is an application program that operates outside the operating system and
carries out functions for a group of users, maintains some common data for all users in the group,
and protects the data from improper access by users in the group?

A ‘Pseudo flaw’ is which of the following?

Which of the following yellow-book defined types of system recovery happens after a system fails
in an uncrontrolled manner in response to a TCB or media failure and the system cannot be
brought to a consistent state?

Which one of the following describes a reference monitor?