In which of the following models are Subjects and Objects identified and the permissions applied to each
subject/object combination are specified? Such a model can be used to quickly summarize what permissions a
subject has for various system objects.

Which of the following is the lowest TCSEC class wherein the systems must support separate operator and
system administrator roles?

Which of the following is NOT a basic component of security architecture?

The Orange Book is founded upon which security policy model?

Which of the following statements relating to the Bell-LaPadula security model is FALSE (assuming the Strong
Star property is NOT being used)?

Which of the following would be used to implement Mandatory Access Control (MAC)?

Which of the following is an example of discretionary access control?

Which access control model would a lattice-based access control model be an example of?

Which of the following is not a physical control for physical security?

What security model implies a central authority that defines rules and sometimes global rules, dictating what
subjects can have access to what objects?