Study. uk . com
  1. Home
  2. All questions
  3. Question 227

CISSP study material · question 227 of 500

An auditor asks on what basis FIPS 140-3 was written and what it does to its predecessor. Which statement is correct?

  1. It applies only to hardware modules, leaving FIPS 140-2 for software.
  2. It supersedes FIPS 140-2 entirely and is aligned with ISO/IEC 19790 and ISO/IEC 24759.
  3. It supplements FIPS 140-2, which remains valid for legacy modules indefinitely.
  4. It was written independently of any international standard.
Show the answer

Answer: B. It supersedes FIPS 140-2 entirely and is aligned with ISO/IEC 19790 and ISO/IEC 24759.

FIPS 140-3 supersedes FIPS 140-2 in its entirety and adopts the international standards ISO/IEC 19790 and ISO/IEC 24759 rather than restating requirements from scratch.

Source: NIST FIPS 140-3 (NIST) — FIPS 140-3 > 3. Explanation and Key words

Challenge yourself on this topic → Study as cards