nerdexam
(ISC)2

CGRC · Question #400

Publication that specifies security requirements for federal information and Info Systems in 17 security related areas that represent a broad-based, balanced information security program. Response:

The correct answer is A. FIPS 200. FIPS 200 outlines the minimum security requirements for federal information and information systems across 17 distinct security-related areas.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Publication that specifies security requirements for federal information and Info Systems in 17 security related areas that represent a broad-based, balanced information security program. Response:

Options

  • AFIPS 200
  • BFIPS 299
  • CFIPS 300
  • DFIPS 199

How the community answered

(46 responses)
  • A
    93% (43)
  • C
    4% (2)
  • D
    2% (1)

Why each option

FIPS 200 outlines the minimum security requirements for federal information and information systems across 17 distinct security-related areas.

AFIPS 200Correct

FIPS 200, titled 'Minimum Security Requirements for Federal Information and Information Systems,' mandates the minimum security requirements for federal information and information systems. It categorizes these requirements into 17 security-related areas, which are further elaborated by the control families in NIST SP 800-53.

BFIPS 299

FIPS 299 does not exist as an official NIST publication.

CFIPS 300

FIPS 300 does not exist as an official NIST publication.

DFIPS 199

FIPS 199 focuses on defining security categories (impact levels-low, moderate, high) for information and information systems, not the specific security requirements or control families.

Concept tested: FIPS 200 (Minimum Security Requirements)

Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.200.pdf

Topics

#FIPS 200#Federal Security Requirements#NIST Standards#Information System Security

Community Discussion

No community discussion yet for this question.

Full CGRC Practice