The Orange Book describes four hierarchical levels to categorize security systems. <br/><br/>Which of the following levels require mandatory protection?
Practise this CISSP question free, then download the PDF, watch the video walkthrough, or unlock timed mock exams for the full web bank.
✓ Correct answer: C. A and B.The U.S. Department of Defense developed the Trusted Computer System Evaluation Criteria (TCSEC), which was used to evaluate operating systems, applications, and different products. These evaluation criteria are published in a book known as the Orange Book.<br/><br/>TCSEC provides a classification system that is divided into hierarchical divisions of assurance levels:<br/><br/>A. Verified protection<br/><br/>B. Mandatory protection<br/><br/>C. Discretionary protection<br/><br/>D. Minimal security<br/><br/>Classification A represents the highest level of assurance, and D represents the lowest level of assurance. Level B is the lowest level that requires mandatory protection. Level A, being a higher level also requires mandatory protection.
Keep practising. Use the free CISSP PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.
Free practice here. Timed mocks when you are ready.
Study the CISSP Exam Prep 2026 Test free question explanations, download the PDF, then unlock timed mock exams on the web when you want exam-day practice.
Theory