Which of the following formulas was developed by FIPS 199 for categorization of an information type?

The correct answer is B. SC information type = {(confidentiality, impact), (integrity, impact), (availability, impact)}. FIPS 199 (Standards for Security Categorization of Federal Information and Information Systems) defines the security category of an information type using the three security objectives from FIPS 140: confidentiality, integrity, and availability. Each objective is paired with a…

Scope of the System

Question

Options

ASC information type = {(confidentiality, controls), (integrity, controls), (authentication,
BSC information type = {(confidentiality, impact), (integrity, impact), (availability, impact)}
CSC information type = {(confidentiality, risk), (integrity, risk), (availability, risk)}
DSC information type = {(Authentication, impact), (integrity, impact), (availability, impact)}

How the community answered

(22 responses)

A
5% (1)
B
86% (19)
C
9% (2)

Explanation

FIPS 199 (Standards for Security Categorization of Federal Information and Information Systems) defines the security category of an information type using the three security objectives from FIPS 140: confidentiality, integrity, and availability. Each objective is paired with a potential impact value (Low, Moderate, or High), not 'controls,' 'risk,' or 'authentication.' The formula is: SC information type = {(confidentiality, impact), (integrity, impact), (availability, impact)}.

Topics

#FIPS 199#Information Categorization#CIA Triad#Impact Assessment

Community Discussion

No community discussion yet for this question.

Full CAP Practice