A reference monitor is a system component that enforces access controls
on an object. Specifically, the reference monitor concept is an abstract
machine that mediates all access of subjects to objects. The hardware,
firmware, and software elements of a trusted computing base that
implement the reference monitor concept are called:

Which choice below is NOT an element of IPSec?

Which choice below is an accurate statement about the difference
between monitoring and auditing?

The type of access control that is used in local, dynamic situations where
subjects have the ability to specify what resources certain users can access
is called:

The number of times a password should be changed is NOT a function of:

Three things that must be considered for the planning and implementation

of access control mechanisms are:

Access control that is a function of factors such as location, time of day,
and previous access history is called:

To what does covert channel eavesdropping refer?

In a relational database system, a primary key is chosen from a set of:

Controlling access to information systems and associated networks is
necessary for the preservation of their confidentiality, integrity, and
availability. Which of the following is NOT a goal of integrity?