FIPS-140 is a standard for the security of which of the following?

A.
Cryptographic service providers

B.
Smartcards

C.
Hardware and software cryptographic modules

D.
Hardware security modules

Explanation:
The National Institute of Standards and Technology (NIST) issues the 140 Publication Series to coordinate the
requirements and standards for cryptographic modules which include both hardware and software components
for use by departments and agencies of the United States federal government. FIPS 140 does not purport to
provide sufficient conditions to guarantee that a module conforming to its requirements is secure, still less that
a system built using such modules is secure. The requirements cover not only the cryptographic modules
themselves but also their documentation and (at the highest security level) some aspects of the comments
contained in the source code.
Incorrect Answers:
A: FIPS-140 is not a standard for cryptographic service providers.
B: FIPS-140 is not a standard for smartcards.
D: FIPS-140 is not a standard for hardware security modules.

https://en.wikipedia.org/wiki/FIPS_140