CompTIA Security+ Exam Prep

Answer: C - The U.S. Department of Defense developed the Trusted Computer System Evaluation Criteria (TCSEC), which is better known as the Orange Book. This book is used to evaluate operating systems, applications, and different other products. These evaluation criteria are published in a book with an orange cover, hence, the Orange Book. Customers use the assurance rating that the criteria presents as a metric when comparing different products. It also provides direction for manufacturers so they know what specifications to build to and provides a one-stop evaluation process so customers do not need to have individual components within the system evaluated.