Which one the following is NOT one of the three major parts of the Common Criteria (CC)?

A.
Introduction and General Model

B.
Security Assurance Requirements

C.
Security Functional Requirements

D.
Security Evaluation Requirements

Explanation:
The correct answer is “Security Evaluation Requirements”, a distracter. * Answer “Introduction and
General Model” is Part 1 of the Cc. It defines general concepts and principles of information security
and defines the contents of the Protection Profile (PP), Security Target (ST), and the Package. * The
Security Functional Requirements are Part 2 of the CC, which contains a catalog of welldefined
standard means of expressing security requirements of IT products and systems. * Answer “Security
Assurance Requirements” is Part 3 of the CC and comprises a catalog of a set of standard assurance
components.