CISSP-ISSEP: Information Systems Security Engineering Professional

Question

In 2003, NIST created a new Certification & Accreditation (C&A) guideline called FIPS 199. Which potential-impact levels are defined by FIPS 199? Each correct answer represents a complete solution. Choose all that apply.

Choose three

Explanation

FIPS 199 defines three potential-impact levels for the loss of confidentiality, integrity, or availability: low, moderate, and high. “Medium” is not a FIPS 199 impact level.

Learn more

FIPS 199 — Standards for Security Categorization of Federal Information and Information Systems

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ180

Community Discussion