Certified Ethical Hacker (CEH v10) — Question 73

Which regulation defines security and privacy controls for Federal information systems and organizations?

Answer options

• A. HIPAA
• B. EU Safe Harbor
• C. PCI-DSS
• D. NIST-800-53

Correct answer: D

Explanation

The correct answer is D, NIST-800-53, as it specifically provides a comprehensive framework for security and privacy controls tailored for Federal information systems. Options A (HIPAA), B (EU Safe Harbor), and C (PCI-DSS) pertain to different sectors and do not focus on Federal information systems.