Certified Information Systems Security Professional – CISSP – Question310

Which of the following is the PRIMARY mechanism used to limit the range of objects available to a given subject within different execution domains?

A.
Process isolation
B. Data hiding and abstraction
C. Use of discrete layering and Application Programming Interfaces (API)
D. Virtual Private Network (VPN)