Covert channel analysis is required for
A.
Systems processing Top Secret or classified information.
B.
A Trusted Computer Base with a level of trust B2 or above.
C.
A system that can be monitored in a supervisor state.
D.
Systems that use exposed communication links.
Explanation:
Table 6.6 Standards Comparison
B2 Structured Protection (covert channel, device labels, subject sensitivity labels, trusted path,
trusted facility management, configuration management) F4+E4 EAL5 – Roberta Bragg CISSP
Certification Training Guide (que) pg 370
Dumb question…TCSEC does not ‘require’ covert channel. Protection ‘against’ Covert Channel is mandated at B2 assurance level of TCSEC.
0
0