Exam CSSLP topic 2 question 50 discussion

Actual exam question from ISC's CSSLP

Question #: 50
Topic #: 2

Which of the following requires all general support systems and major applications to be fully certified and accredited before these systems and applications are put into production? Each correct answer represents a part of the solution. Choose all that apply.

A. NIST
B. Office of Management and Budget (OMB)
C. FIPS
D. FISMA

Show Suggested Answer

Suggested Answer: reaccredited every three years. Answer: A is incorrect. The National Institute of Standards and Technology (NIST), known between 1901 and 1988 as the National 🗳️
FISMA and Office of Management and Budget (OMB) require all general support systems and major applications to be fully certified and accredited before they are put into production. General support systems and major applications are also referred to as information systems and are required to be
Bureau of Standards (NBS), is a measurement standards laboratory which is a non-regulatory agency of the United States Department of Commerce. The institute's official mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that standards developed by the United States federal government for use by all non-military government agencies and by government contractors. Many FIPS standards are modified versions of standards used in the wider community (ANSI, IEEE, ISO, etc.). Some FIPS standards were originally developed by the U.S. government. For instance, standards for encoding data (e.g., country codes), but more significantly some encryption standards, such as the Data Encryption
Standard (FIPS 46-3) and the Advanced Encryption Standard (FIPS 197). In 1994, NOAA (Noaa) began broadcasting coded signals called FIPS (Federal
Information Processing System) codes along with their standard weather broadcasts from local stations. These codes identify the type of emergency and the specific geographic area (such as a county) affected by the emergency.

by 74gjd_37 at Oct. 1, 2023, 5:49 p.m.

Comments

Submit Cancel

74gjd_37

5 months, 2 weeks ago

Selected Answer: BD

B. Office of Management and Budget (OMB) D. FISMA Office of Management and Budget (OMB) Circular A-130 requires that all general support systems, major applications, or IT infrastructure components be fully certified and accredited against defined federal government security standards before they are put into production environment. This requirement is part of the Federal Information Security Modernization Act (FISMA), which mandates agencies to establish a risk-based information security management program as per NIST guidelines (National Institute of Standards and Technology). FIPS (Federal Information Processing Standards) on the other hand provides specific implementation guides for different types of technology used in Government Systems.

upvoted 1 times

...

Exam CSSLP All Questions

View all questions & answers for the CSSLP exam

Exam CSSLP topic 2 question 50 discussion

Comments

74gjd_37

SY0-701