In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199.
What levels of potential impact are defined by FIPS 199 Each correct answer represents a
complete solution. Choose all that apply.

Which of the following federal agencies coordinates, directs, and performs highly specialized
activities to protect U.S. information systems and produces foreign intelligence information

Which of the following firewall types operates at the Network layer of the OSI model and can filter
data by port, interface address, source address, and destination address

Which of the following are the subtasks of the Define Life-Cycle Process Concepts task Each
correct answer represents a complete solution. Choose all that apply.

You work as a systems engineer for BlueWell Inc. You want to protect and defend information and
information systems by ensuring their availability, integrity, authentication, confidentiality, and nonrepudiation. Which of the following processes will you use to accomplish the task

Which of the following techniques are used after a security breach and are intended to limit the
extent of any damage caused by the incident

DoD 8500.2 establishes IA controls for information systems according to the Mission Assurance
Categories (MAC) and confidentiality levels. Which of the following MAC levels requires high
integrity and medium availability

There are seven risk responses for any project. Which one of the following is a valid risk response
for a negative risk event

You work as a systems engineer for BlueWell Inc. You want to communicate the quantitative and
qualitative system characteristics to all stakeholders. Which of the following documents will you
use to achieve the above task

A security policy is an overall general statement produced by senior management that dictates
what role security plays within the organization. What are the different types of policies Each
correct answer represents a complete solution. Choose all that apply.