- Home
- ISC Certification
- CISSP Exam
- ISC.CISSP.v2022-09-06.q331 Practice Test
Question 331
Which choice describes the Forest Green Book?
Correct Answer: A
The Forest Green book is a Rainbow series book that defines the secure handling of sensitive or classified automated information system memory and secondary storage media, such as degaussers, magnetic tapes, hard disks, floppy disks, and cards. The Forest Green book details procedures for clearing, purging, declassifying, or destroying automated information system (AIS) storage media to prevent data remanence. Data remanence is the residual physical representation of data that has been erased in some way. After storage media is erased there may be some physical characteristics that allow data to be reconstructed.
*Answer "It is a tool that assists vendors in data gathering for certifiers." is the Blue Book, NCSCTG-019 Trusted Product Evaluation Questionnaire Version-2. The Blue book is a tool to assist system developers and vendors in gathering data to assist evaluators and certifiers assessing trusted computer systems.
*Answer "It is a Rainbow series book that defines guidelines for implementing access control lists." is the Grey/Silver Book, NCSC-TG-020A, the Trusted UNIX Working Group (TRUSIX) Rationale for Selecting Access Control. The Grey/Silver book defines guidelines for implementing access control lists (ACLs) in the UNIX system. Source: NCSC-TG025 A Guide to Understanding Data Remanence in Automated Information Systems, NCSC-TG-020A Trusted UNIX Working Group (TRUSIX) Rationale for Selecting Access Control, and NCSC-TG-019 Trusted Product Evaluation Questionnaire Version-2.
*Answer "It is a tool that assists vendors in data gathering for certifiers." is the Blue Book, NCSCTG-019 Trusted Product Evaluation Questionnaire Version-2. The Blue book is a tool to assist system developers and vendors in gathering data to assist evaluators and certifiers assessing trusted computer systems.
*Answer "It is a Rainbow series book that defines guidelines for implementing access control lists." is the Grey/Silver Book, NCSC-TG-020A, the Trusted UNIX Working Group (TRUSIX) Rationale for Selecting Access Control. The Grey/Silver book defines guidelines for implementing access control lists (ACLs) in the UNIX system. Source: NCSC-TG025 A Guide to Understanding Data Remanence in Automated Information Systems, NCSC-TG-020A Trusted UNIX Working Group (TRUSIX) Rationale for Selecting Access Control, and NCSC-TG-019 Trusted Product Evaluation Questionnaire Version-2.
- Other Version
- 3754ISC.CISSP.v2026-05-25.q539
- 2541ISC.CISSP.v2026-04-20.q414
- 12093ISC.CISSP.v2024-12-05.q999
- 11015ISC.CISSP.v2024-09-21.q999
- 10851ISC.CISSP.v2023-07-03.q999
- 3488ISC.CISSP.v2023-04-20.q206
- 8845ISC.CISSP.v2022-08-27.q376
- 14801ISC.CISSP.v2022-04-07.q650
- 145ISC.Fast2test.CISSP.v2021-12-03.by.osborn.827q.pdf
- 24511ISC.CISSP.v2021-10-01.q353
- Latest Upload
- 152PaloAltoNetworks.SSE-Engineer.v2026-10-17.q44
- 256Cisco.300-420.v2026-10-17.q324
- 198Salesforce.MCE-Con-201.v2026-10-15.q108
- 178EMC.NCA.v2026-10-15.q25
- 279Apple.Apple-Device-Support.v2026-10-15.q159
- 183F5.F5CAB3.v2026-10-14.q47
- 185Oracle.1Z0-1048-25.v2026-10-14.q67
- 263Cisco.300-730.v2026-10-14.q199
- 257Salesforce.Sales-Admn-202.v2026-10-14.q160
- 171ServSafe.ServSafe-Manager.v2026-10-13.q32
