nerdexam
(ISC)2

CGRC · Question #585

Any telecommunications or information system that is defined as a national security system (FISMA 2002) because it processes any information the loss, misuse, disclosure, or unauthorized access to or

The correct answer is B. Mission critical system. This definition describes a mission critical system, which is a national security system whose compromise would severely impair an agency's mission.

Scope of the System

Question

Any telecommunications or information system that is defined as a national security system (FISMA 2002) because it processes any information the loss, misuse, disclosure, or unauthorized access to or modification of would have a debilitating impact on the mission of an agency. Response:

Options

  • AMission sensitive information
  • BMission critical system
  • CMajor Application
  • DAccess control System

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    88% (28)
  • C
    6% (2)
  • D
    3% (1)

Why each option

This definition describes a mission critical system, which is a national security system whose compromise would severely impair an agency's mission.

AMission sensitive information

Mission sensitive information refers to the data itself, not the system that processes it.

BMission critical systemCorrect

A mission critical system is specifically defined as a telecommunications or information system, often a national security system under FISMA, where the compromise (loss, misuse, disclosure, unauthorized access, or modification) of its processed information would have a debilitating impact on the agency's mission. The focus is on the system's importance to the mission.

CMajor Application

A Major Application is a broader category under FISMA for applications requiring significant management attention, but it doesn't specifically convey the 'debilitating impact' aspect on the mission in the same way 'mission critical system' does.

DAccess control System

An Access control System is a type of security system that enforces access policies, not a general classification for systems whose compromise would debilitate a mission.

Concept tested: Definition of mission critical system

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf

Topics

#System Classification#Mission Critical System#National Security System#FISMA

Community Discussion

No community discussion yet for this question.

Full CGRC Practice