Which concept is designed to support multilevel security to meet government requirements?

• A. Trusted Operating System
• B. Kernel
• C. SELinux
• D. SEAndroid

Answer: (A)

Multilevel security requires an operating system built to enforce access decisions across different classification levels with formal, mandatory controls and trusted paths. A Trusted Operating System is designed from the ground up to provide these guarantees, aligning with government evaluation criteria that mandate precise labeling, separation, and enforcement of security policies across multiple levels. This ensures, for example, that users or processes at a higher classification cannot read data at a lower level inappropriately, while still allowing necessary information flows under strict controls.

While the kernel is a fundamental part of an OS, it alone doesn’t ensure MLS across the entire system. Security modules like SELinux or SEAndroid implement strong mandatory access controls within a Linux or Android environment, which enhances overall security but isn’t the same as the holistic MLS capability required by government standards. They can support multi-level considerations in some configurations, but the concept specifically designed to meet those government MLS requirements is the Trusted Operating System.