Evaluation Assurance Level (EAL) is used to rate what?

• A. The speed of a network
• B. The encryption strength of a cipher
• C. The security evaluation of a product
• D. The accuracy of timestamps

Answer: (C)

Evaluation Assurance Level focuses on the level of confidence in a product’s security properties, derived from a structured evaluation of its design, implementation, and testing under the Common Criteria. It measures how thoroughly an independent assessment validates that the security features actually work as claimed, under defined conditions and assumptions. It’s not about how fast a network operates, the strength of a cryptographic cipher, or the precision of timestamps. The levels range from basic testing to formal verification, giving buyers a sense of the rigor behind the product’s security claims.