MENU
In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199. What levels of potential impact are defined by FIPS 199?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: B, C, D
Get Premium CSSLP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199. FIPS 199 is a standard for security
categorization of Federal Information and Information Systems. It defines three levels of potential impact:
Low: It causes a limited adverse effect.
Medium: It causes a serious adverse effect.
High: It causes a severe adverse effect.
12 comments · newest first
TH
Thora
3 days ago
I remember reading about Moderate and High.
JO
Jody
8 days ago
Definitely Low and High. Medium seems off.
ST
Stephania
13 days ago
I think the levels are Low, Moderate, and High.
RO
Rodrigo
18 days ago
Low, Moderate, and High are correct, no Medium!
KR
Kris
24 days ago
I thought there was a Very High level too.
AN
Anglea
29 days ago
Wait, isn't Medium just another term for Moderate?
QU
Quiana
1 month ago
Definitely agree, those are the right levels!
GI
Gilbert
1 month ago
FIPS 199 defines Low, Moderate, and High impact levels.
GA
Gayla
1 month ago
I’m a bit confused. I thought there were four levels, but now I’m not so sure. I’ll go with Low and High for sure, but I’ll have to think about Moderate.
TA
Tashia
2 months ago
I feel like I’ve seen a question like this before. I’m pretty sure the correct answers are Low, Moderate, and High.
DI
Dianne
2 months ago
I remember studying something about the impact levels, and I think it’s definitely Low, Moderate, and High. Medium seems off to me.
CA
Carlene
2 months ago
I think FIPS 199 defines three levels of impact: Low, Moderate, and High. I’m not sure about Medium though.