The correct answer is "Computer behavior that might be grounds for a job action or dismissal". While all of the activities described are considered in the broad category of inappropriate activities, this
description is used to define a narrower category of inappropriate
activities.
Answer "Loss incurred unintentionally though the lack of operator training." is defined as accidental loss.
Answer "Theft of information or trade secrets for profit or unauthorized disclosure." is considered intentionally illegal computer activity.
Answer "Data scavenging through the resources available to normal system users."is a keyboard attack, a type of data scavenging attack using common tools or utilities available to the user.

"Strong and efficient block cryptosystems use random key values so an attacker cannot find a pattern as to which S-boxes are chosen and used." Pg. 481 Shon Harris CISSP Certification All-in-One Exam Guide
Not A:
"When a block cipher algorithm is used for encryption and decryption purposes, the message is divided into blocks of bits. These blocks are then put through substitution, transposition, and other mathematical functions, on block at a time." Pg. 480 Shon Harris CISSP Certification All-in-One Exam Guide
Not B:
"Block ciphers are easier to implement in software because they work with blocks of data that the software is used to work with." Pg 483 Shon Harris CISSP Certification All-in-One Exam Guide
Not D:
"This encryption continues until the plaintext is exhausted." Pg. 196 Krutz The CISSP Prep Guide.

This class ("Structured Protection") requires more stringent authentication mechanisms and well-defined interfaces between layers. Subjects and devices require labels and the system must not allow covert channels.
A1 is incorrect. A1 is also called "Verified Design" and requires formal verification of the design and specifications. B3 is incorrect. B3 is also called "Security Domains" and imposes more granularity in each protection mechanism. B1 is incorrect. B1 is also called "Labeled Security" and each data object must have a classification label and each subject a clearance label. On each access attempt, the classification and clearance are checked to verify that the access is permissible.
EXAM TIP: The CBK only discusses the TCSEC in a very minimal fashion and the details are presented in a much more completely in the Shon Harris, All In One book. Folk wisdom has it that this reflects the
CBK/security industry migration away from the TCSEC to the CC but the wise candidate will
develop at least some familiarity with the TCSEC. There are still questions on TCSEC showing up
randomly on the exam.
NOTE FROM CLEMENT:
As of today (April 2014) subjects such as the TCSEC are still proclaimed to be on the exam. Do
make sure that you take some time to review the TCSEC ratings.
You can download a nice one page resume of the TCSEC rating at the following link:
https://www.freepracticetests.org/documents/tcsec.pdf
Do study this one page document and get familiar with what is being introduced at each of the
TCSEC levels. Good questions might be for example:
1.At what level are labels introduced?
2.At what level is the Security Administrator role defined?
3.At what level are covert channel first introduced?
4.At what level do you use formal methods?
References:
The Official ISC2 CBK study guide, pages 329 - 330.
AIO3, pp. 302 - 306
AIOv4 Security Architecture and Design (pages 357 - 361)
AIOv5 Security Architecture and Design (pages 358 - 362)

TCP is a reliable connection-oriented transport for guaranteed delivery of data.
Protocols represent certain rules and regulations that are essential in order to have data
communication between two entities. Internet Protocols work in sending and receiving data
packets. This type of communication may be either connection-less or connection-oriented.
In a connection-oriented scenario, an acknowledgement is being received by the sender from the
receiver in support of a perfect transfer. Transmission Control Protocol or TCP is such a protocol.
On the other hand, UDP or User Datagram Protocol is of the connection-less type where no
feedback is being forwarded to the sender after delivery and the data transfer have taken place or
not. Though, it's not a guaranteed method, but, once a connection is established, UDP works
much faster than TCP as TCP has to rely on a feedback and accordingly, the entire 3-way
handshaking takes place.
The following answers are incorrect:
UDP provides for Error Correction, TCP does not: UDP does not provide for error correction, while
TCP does.
UDP is useful for longer messages, rather than TCP: UDP is useful for shorter messages due to
its connectionless nature.
TCP does not guarantee delivery of data, while UDP does guarantee data delivery: The opposite
is true.
References Used for this question:
http://www.cyberciti.biz/faq/key-differences-between-tcp-and-udp-protocols/
http://www.skullbox.net/tcpudp.php
James's TCP-IP FAQ - Understanding Port Numbers.