FIPS 199 defines the three levels of potential impact on organizations low, moderate, and high. Which of the following are the effects of loss of confidentiality, integrity, or availability in a high

Question

Options

• AThe loss of confidentiality, integrity, or availability might cause severe degradation in or loss of
• BThe loss of confidentiality, integrity, or availability might result in major financial losses.
• CThe loss of confidentiality, integrity, or availability might result in a major damage to organizational
• DThe loss of confidentiality, integrity, or availability might result in severe damages like life

• A
  100% (37)

Explanation

All four options (A, B, C, D) are correct because FIPS 199 defines the high impact level as one where the loss of confidentiality, integrity, or availability could have a severe or catastrophic adverse effect across multiple dimensions simultaneously - not just one. Specifically, the standard identifies that high-impact losses may cause severe degradation or loss of mission capability (A), major financial losses (B), major damage to organizational assets (C), and severe or catastrophic harm to individuals up to and including loss of life (D).

There are no wrong distractors here - the key insight is that FIPS 199's high impact definition is multi-dimensional: it encompasses operational, financial, asset-related, and human harm effects all at once, which is why selecting only one or two would be incomplete and incorrect.

Memory tip: Think of HIGH impact as "everything goes wrong at once" - use the acronym MOFA: Mission failure, Organizational asset damage, Financial loss, and Adverse human consequences (including death). If even one of these could occur severely, it's HIGH. Contrast with LOW ("limited" effects) and MODERATE ("serious but not catastrophic" effects) to keep the three levels distinct on exam day.

No community discussion yet for this question.