Protection and Security Questions and Answers

Answer: C

Login-ID and password ensure Authentication.

Authentication verifies that users are who they claim to be. A login ID identifies the user, and the password, something only that user should know, proves the claim.

Authorisation is the next step, deciding what an authenticated user may do. Confidentiality (keeping data secret) and integrity (keeping it unaltered) are protected by access control and encryption, which depend on authentication but are not what the login mechanism itself provides.

Answer: B

Windows uses User mode and Kernel mode.

The processor runs Windows code in two privilege levels. Applications run in user mode, where they cannot access system memory or execute privileged instructions directly; the operating system kernel and drivers run in kernel mode with full access. A user-mode program must make a system call to request a kernel service, which protects critical operating system data.

Administrator versus normal user is an account permission level, not a processor mode. Hardware and software modes, and hardware and software interrupt modes, are not how Windows separates applications from the kernel.

Answer: D

The lowest level is Type D.

The US Department of Defense's Trusted Computer System Evaluation Criteria (the Orange Book) grade systems in divisions A, B, C and D. Division D, minimal protection, is for systems that were evaluated but failed the higher requirements.

Security increases from D through C (discretionary protection) and B (mandatory protection) to A (verified protection), the highest level.