TCSEC classification A offers what characteristic that classification B does not?
A.
Testing is less detailed in A
B.
A requires fewer TCB components
C.
More formal methods of evaluation are used in A
D.
Security mechanisms are under less scrutiny in A
Explanation:
The biggest difference between classifications A and B is the existence of more formalized methods of evaluation. The system’s design, coding practices, documentation, testing procedures, and even product delivery are highly scrutinized.