Which Orange book security rating introduces security labels?

A.
C2

B.
B1

C.
B2

D.
B3

Explanation:

Class (B1) or “Labeled Security Protection” systems require all the features required for class (C2). In
addition, an informal statement of the security policy model, data labeling, and mandatory access
control over named subjects and objects must be present. The capability must exist for accurately
labeling exported information. Any flaws identified by testing must be removed.