nerdexam
(ISC)2

CGRC · Question #308

Which NIST SP describes various sensitivity rankings for federal systems; Guide for Developing Security Plans for Federal Info Systems? Response:

The correct answer is A. NIST SP 800-18. NIST SP 800-18, 'Guide for Developing Security Plans for Federal Information Systems,' describes how to create security plans and includes discussions on sensitivity rankings for federal systems.

Scope of the System

Question

Which NIST SP describes various sensitivity rankings for federal systems; Guide for Developing Security Plans for Federal Info Systems? Response:

Options

  • ANIST SP 800-18
  • BNIST SP 800-15
  • CNIST SP 800-19
  • DNIST SP 800-20

How the community answered

(23 responses)
  • A
    91% (21)
  • C
    4% (1)
  • D
    4% (1)

Why each option

NIST SP 800-18, 'Guide for Developing Security Plans for Federal Information Systems,' describes how to create security plans and includes discussions on sensitivity rankings for federal systems.

ANIST SP 800-18Correct

NIST SP 800-18 specifically serves as the foundational guide for developing comprehensive security plans for federal information systems. It provides detailed instructions on how to structure these plans and addresses key aspects like categorizing information systems, which involves considering sensitivity rankings.

BNIST SP 800-15

NIST SP 800-15 does not exist as an official publication in the NIST 800 series.

CNIST SP 800-19

NIST SP 800-19 does not exist as an official publication in the NIST 800 series.

DNIST SP 800-20

NIST SP 800-20 is a guide for securing specific operating systems (e.g., Windows XP), not a general guide for developing security plans or describing sensitivity rankings for federal systems.

Concept tested: NIST Special Publications - Security Plans

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-18r1.pdf

Topics

#NIST SP 800-18#Security Planning#System Categorization#Federal Systems

Community Discussion

No community discussion yet for this question.

Full CGRC Practice