Explanation

Explanation/Reference:
Explanation:
Authentication involves verifying a user's identification information using a passphrase, PIN value, biometric, one-time password, or password.
Incorrect Answers:
B: Identification involves a user supplying identification information using a username, user ID, or account number.
C: Integrity is a security principle that ensures information and systems are not maliciously or accidentally modified.
D: Confidentiality is used to make sure that the required level of secrecy is imposed at every junction of data processing and prevents unauthorized disclosure.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, pp. 23, 24, 166

Explanation/Reference:
Explanation:
Configuration Management is a requirement only for B2, B3, and A1.
Configuration management consists of identifying, controlling, accounting for, and auditing all changes made to a particular system or equipment during its life cycle. In particular, as related to equipment used to process classified information, equipment can be identified in categories of COMSEC, TEMPEST, or as a Trusted Computer Base (TCB).
The Trusted Computer System Evaluation Criteria (TCSEC) requires all changes to the TCB for classes B2 through A1 be controlled by configuration management.
Incorrect Answers:
A: Configuration Management is also a requirement in level B2.
B: Configuration Management is not a requirement in level B1. Furthermore, Configuration Management is also a requirement in level A1.
C: Configuration Management is a requirement in levels B2 and B3.
References:
Krutz, Ronald L. and Russell Dean Vines, The CISSP Prep Guide: Mastering the CISSP and ISSEP Exams, 2nd Edition, Wiley Publishing, Indianapolis, 2004, p. 223
http://surflibrary.org/ses/TEMPBOOK/CH6CONFGMGT.pdf Page 6-1