Study. uk . com
  1. Home
  2. All questions
  3. Question 225

CISSP study material · question 225 of 500

A procurement specification demands a module validated at FIPS 140-3 Level 3 and states that Level 3 requirements replace the general ones. How are the requirements at a given level actually composed?

  1. Each level's requirements replace those of the levels below it.
  2. Levels apply only to physical security; other areas are graded pass or fail.
  3. Levels are advisory and a vendor may claim any of them.
  4. A level's requirements are its own plus those that apply to every module regardless of level.
Show the answer

Answer: D. A level's requirements are its own plus those that apply to every module regardless of level.

FIPS 140-3 states the requirements for a particular level include the requirements specific to that level and the requirements that apply to all modules regardless of level.

Source: NIST FIPS 140-3 (NIST) — FIPS 140-3 > 3. Explanation

Challenge yourself on this topic → Study as cards