Which term provides sufficient support for multilevel security to meet government requirements?

• A. Evaluation Assurance Level (EAL)
• B. Basic Input Output System (BIOS)
• C. Trusted Operating System
• D. Unified Extensible Firmware Interface (UEFI)

Answer: (C)

Multilevel security hinges on the system itself enforcing a formal security policy that governs access across different classification levels. A trusted operating system is designed to provide that enforcement: it includes a trusted computing base that enforces mandatory access control, data labeling, and controlled information flow, and it generates auditable records of security-relevant events. This combination is what allows government requirements for MLS to be met, ensuring higher-classified data isn’t exposed to lower-clearance users unless policy allows.

In contrast, an Evaluation Assurance Level measures how thoroughly a product was evaluated for security, but it doesn’t implement the enforcement mechanisms of MLS by itself. BIOS or UEFI are firmware interfaces and don’t provide the cross-level access controls needed for multilevel security.