CGRC · Question #259
FIPS 200 provides how many minimum security requirements for federal information and information systems? The requirements represent a broad based, balanced information security program that…
The correct answer is B. 17. FIPS 200 outlines 17 minimum security requirements for federal information and information systems, covering management, operational, and technical aspects to protect the CIA triad.
Question
FIPS 200 provides how many minimum security requirements for federal information and information systems? The requirements represent a broad based, balanced information security program that addresses the management, operational, and technical aspects of protecting the CIA of federal information and information systems. Response:
Options
- A5
- B17
- C21
- D10
How the community answered
(47 responses)- A2% (1)
- B91% (43)
- C6% (3)
Why each option
FIPS 200 outlines 17 minimum security requirements for federal information and information systems, covering management, operational, and technical aspects to protect the CIA triad.
5 is an incorrect number; FIPS 200 defines a significantly higher number of security requirement families.
Federal Information Processing Standard (FIPS) 200, 'Minimum Security Requirements for Federal Information and Information Systems,' specifies 17 families of minimum security requirements. These requirements serve as a baseline for agencies to protect their information systems and align with NIST Special Publication 800-53 security controls.
21 is an incorrect number; FIPS 200 specifies 17 families of security requirements.
10 is an incorrect number; FIPS 200 details 17 minimum security requirement families.
Concept tested: FIPS 200 minimum security requirements
Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.200.pdf
Topics
Community Discussion
No community discussion yet for this question.