CGRC · Question #556
What are three examples of data classification found in FIPS PUB 199? Response:
The correct answer is A. Public, Internal, Restricted. FIPS PUB 199, while primarily defining security impact levels, supports the conceptual data classification of information into categories such as Public, Internal, and Restricted, based on its confidentiality, integrity, and availability requirements.
Question
What are three examples of data classification found in FIPS PUB 199? Response:
Options
- APublic, Internal, Restricted
- BConcealed, Internal, Restricted
- CPublic, Centrality, Restricted
- DPublic, Internal, Comprehensive.
How the community answered
(53 responses)- A89% (47)
- B6% (3)
- C2% (1)
- D4% (2)
Why each option
FIPS PUB 199, while primarily defining security impact levels, supports the conceptual data classification of information into categories such as Public, Internal, and Restricted, based on its confidentiality, integrity, and availability requirements.
While FIPS PUB 199 specifically defines impact levels (Low, Moderate, High) for confidentiality, integrity, and availability, these directly inform and correlate with common data classification schemes. 'Public, Internal, Restricted' are widely used categories that align with the levels of protection needed, corresponding to FIPS 199's framework for assessing information sensitivity.
"Concealed" is not a standard data classification category recognized alongside "Internal" and "Restricted."
"Centrality" is not a data classification category; it refers to the importance or location of data.
"Comprehensive" is not a data classification category; it typically refers to completeness or thoroughness.
Concept tested: FIPS PUB 199 data classification concepts
Source: https://csrc.nist.gov/publications/detail/fips/199/final
Topics
Community Discussion
No community discussion yet for this question.