Study. uk . com
  1. Home
  2. All questions
  3. Question 174

CISSP study material · question 174 of 500

An analyst categorises a published statistics dataset and wants to record that confidentiality is irrelevant to it. What does FIPS 199 permit for an information type?

  1. Not applicable may be recorded against any of the three objectives.
  2. Not applicable may be recorded, but only against the confidentiality objective.
  3. Not applicable is permitted only where the organisation is not a federal agency.
  4. Not applicable is never permitted; low is the floor for every objective.
Show the answer

Answer: B. Not applicable may be recorded, but only against the confidentiality objective.

For an information type the acceptable values are low, moderate, high or not applicable, and the not applicable value only applies to the confidentiality objective.

Source: NIST FIPS 199 (NIST) — FIPS 199 > Security Categorization Applied to Information Types

Challenge yourself on this topic → Study as cards