CompTIA Security+ Exam Prep

Answer: A - Security evaluations examine the security-relevant parts of a system, meaning the TCB, access control mechanism, reference monitor, kernel, and protection mechanism. The relationship and interaction between these components are also evaluated. There are different methods of assigning assurance levels to systems. Two reasons explain why more than one type of assurance evaluation process exists: methods and ideologies have evolved over time and various parts of the world look at computer security differently and rate some aspects of security differently.