Which statement about the reference monitor is incorrect?
A.
It is an abstract machine
B.
It must label every requestor
C.
It must be small enough to test
D.
It must be tamper proof
Explanation:
The reference monitor mediates access to objects. It references the
labels applied to requestors and objects, deciding whether the requestor has the
appropriate rights to access and object, and whether the object is permitted to
receive a request from such a requestor. It does not itself apply the labels to
either of these entities. All other statements are true.