Certified Authorization Professional (CAP) — Question 3

In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199.
What levels of potential impact are defined by FIPS 199?
Each correct answer represents a complete solution. Choose all that apply.

Answer options

• A. Medium
• B. High
• C. Low
• D. Moderate

Correct answer: A, B, C

Explanation

FIPS 199 defines three levels of potential impact: Low, Medium, and High. Therefore, options A, B, and C are correct as they represent the specified levels, while option D, Moderate, is not recognized as a distinct level in FIPS 199.