nerdexam
(ISC)2

CGRC · Question #485

Which FIPS publication specifies security requirements for federal information and information systems in 17 security related areas that represent a broad-based, balanced information security…

The correct answer is A. FIPS PUB 200. The question asks for the FIPS publication that outlines security requirements for federal information systems across 17 distinct areas, which is precisely the scope of FIPS Publication 200.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which FIPS publication specifies security requirements for federal information and information systems in 17 security related areas that represent a broad-based, balanced information security program? Response:

Options

  • AFIPS PUB 200
  • BFIPS PUB 100
  • CFIPS PUB 299
  • DFIPS PUB 300

How the community answered

(43 responses)
  • A
    88% (38)
  • B
    2% (1)
  • C
    2% (1)
  • D
    7% (3)

Why each option

The question asks for the FIPS publication that outlines security requirements for federal information systems across 17 distinct areas, which is precisely the scope of FIPS Publication 200.

AFIPS PUB 200Correct

FIPS Publication 200, 'Minimum Security Requirements for Federal Information and Information Systems,' specifies the minimum security requirements for federal information and information systems, categorizing them into 17 security-related areas. This publication establishes a broad-based and balanced information security program for federal agencies.

BFIPS PUB 100

FIPS PUB 100 is related to 'Guideline for Use of Advanced Data Communication Techniques,' not general security requirements.

CFIPS PUB 299

FIPS PUB 299 does not exist as an official FIPS publication.

DFIPS PUB 300

FIPS PUB 300 does not exist as an official FIPS publication.

Concept tested: FIPS PUB 200 content

Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.200.pdf

Topics

#FIPS PUB 200#Federal Information Systems#Security Requirements#NIST

Community Discussion

No community discussion yet for this question.

Full CGRC Practice