In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199.
What levels of potential impact are defined by FIPS 199? Each correct answer represents a
complete solution. Choose all that apply.
A.
Moderate
B.
Medium
C.
High
D.
Low
Explanation:
In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known
as FIPS 199. FIPS 199 is a standard for security categorization of Federal Information and
Information Systems. It defines three levels of potential impact: Low: It causes a limited adverse
effect. Medium: It causes a serious adverse effect. High: It causes a severe adverse effect.