Certified Authorization Professional – CAP – Question161

Which of the following formulas was developed by FIPS 199 for categorization of an information type?

A.
SC information type = {(confidentiality, controls), (integrity, controls), (authentication, controls)}
B. SC information type = {(confidentiality, impact), (integrity, impact), (availability, impact)}
C. SC information type = {(confidentiality, risk), (integrity, risk), (availability, risk)}
D. SC information type = {(Authentication, impact), (integrity, impact), (availability, impact)}

Correct Answer: B