Study. uk . com
  1. Home
  2. All questions
  3. Question 177

CISSP study material · question 177 of 500

A system's routing tables, password file and key management data are being categorised. What does FIPS 199 require for such system information?

  1. It is excluded from categorisation and governed by the configuration baseline.
  2. It must be protected commensurate with the most sensitive user information the system handles.
  3. It takes the average of the categories of the user information types present.
  4. It is categorised low by default, since it is not user information.
Show the answer

Answer: B. It must be protected commensurate with the most sensitive user information the system handles.

System information such as routing tables, password files and key management data must be protected at a level matching the most critical or sensitive user information the system processes.

Source: NIST FIPS 199 (NIST) — FIPS 199 > footnote 3

Challenge yourself on this topic → Study as cards