Study. uk . com
  1. Home
  2. All questions
  3. Question 231

CISSP study material · question 231 of 500

A buyer finds a module on the validation programme's historical list and proposes to purchase it. What does FIPS 140-3 say about that list?

  1. It may be used where no equivalent module appears on the current list.
  2. It supersedes the current list for modules still in vendor support.
  3. It is the authoritative list for modules validated before 2019.
  4. It is provided for reference only and must not be used for procurement decisions.
Show the answer

Answer: D. It is provided for reference only and must not be used for procurement decisions.

FIPS 140-3 notes the historical list should not be used for procurement decisions and is provided for reference purposes only; agencies buy from the current validated modules list.

Source: NIST FIPS 140-3 (NIST) — FIPS 140-3 > 12. Implementation Schedule

Challenge yourself on this topic → Study as cards