Which of the following is not an Orange book-defined operational assurance requirement?
A.
System architecture
B.
Trusted facility management
C.
Configuration management
D.
Covert channel analysis
Explanation:
Configuration management is a part of life cycle assurance opposed to operational
assurance.
“The operational assurance requirements specified in the Orange Book are as follows:
System Architecture
System integrity
Covert channel analysis
Trusted facility management
Trusted recovery
The life cycle assurance requirements specified in the Orange Book are as follows:
Security testingDesign specification and testing
Configuration Management
Trusted Distribution”
Pg. 301 Krutz: The CISSP Prep Guide: Gold Edition.
cehk
1
0
Not Correct. The explanation contradicts the answer too. Configuration Management is a requirement at the B2 and above TCSEC levels.
1
0