nerdexam
(ISC)2

CGRC · Question #278

What does SC stand for regarding Information Types? Response:

The correct answer is A. Security Categorization. In the context of Information Types, SC stands for Security Categorization, which is the process of assigning impact levels to information based on confidentiality, integrity, and availability.

Scope of the System

Question

What does SC stand for regarding Information Types? Response:

Options

  • ASecurity Categorization
  • BStandards Categorization
  • CSystem Categorization
  • DSimple Categorization

How the community answered

(42 responses)
  • A
    86% (36)
  • B
    7% (3)
  • C
    2% (1)
  • D
    5% (2)

Why each option

In the context of Information Types, SC stands for Security Categorization, which is the process of assigning impact levels to information based on confidentiality, integrity, and availability.

ASecurity CategorizationCorrect

Within the realm of Information Types and system security, "SC" commonly refers to "Security Categorization." This process, as defined by standards like FIPS 199, involves assessing the potential impact of a loss of confidentiality, integrity, or availability for an information system and the information it processes, stores, or transmits.

BStandards Categorization

Standards Categorization is not a recognized term or process related to classifying information types for security purposes.

CSystem Categorization

System Categorization relates to classifying the system as a whole based on its information, but "SC" itself specifically refers to "Security Categorization" of the information and system.

DSimple Categorization

Simple Categorization is a generic term and not the specific meaning of "SC" in this technical context.

Concept tested: Definition of Security Categorization (SC)

Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.199.pdf

Topics

#Security Categorization#NIST RMF#Information Classification#RMF Step 1

Community Discussion

No community discussion yet for this question.

Full CGRC Practice