1. Which of the following is NOT a TCB Design Principle:

1. Least Privilege
2. Security by Obscurity
3. Ease of Use
4. Open Design
5. Fail-safe defaults

2. Which of the following is a reason why the BLP (Bell and La Padua) model provides confidentiality?

1. Allows read up
2. Does not allow read up
3. Allows write down and read down
4. Doesnt allow read except for superusers