FITSI-M SP/FIPS/Acronyms/Definitions
Exam Questions and Answers Graded A+
SP 800-14 - Correct answer-GASSP - Generally Accepted Principles and Practices
for Securing Information Systems (Ethics)
SP 800-18 - Correct answer-Developing System Security Plans
SP 800-27, Rev A - Correct answer-Engineering Principles for IT Security -
Common Criteria
SP 800-30, Rev 1 - Correct answer-Conducting Risk Assessments
SP 800-34 - Correct answer-Contingency Planning Guide for Federal IT Systems
SP 800-37, Rev 1 - Correct answer-Applying RMF (Risk Management
Framework)
SP 800-39 - Correct answer-Managing Information Security Risk
SP 800-40, Rev 3 - Correct answer-Patch and Vulnerability Management Program
SP 800-41, Rev 1 - Correct answer-Firewalls and Firewall Policy
SP 800-45, Rev 2 - Correct answer-Guidelines on E-mail Security
©COPYRIGHT 2025, ALL RIGHTS RESERVED 1
, SP 800-47 - Correct answer-Security Guide for Interconnecting Information
Technology Systems
SP 800-50 - Correct answer-IT Security Awareness and Training Program
SP 800-53, Rev 4 - Correct answer-Security Controls for Federal IT Systems
SP 800-53A, Rev 4 - Correct answer-Assessing Security Controls
SP 800-55, Rev 1 - Correct answer-Performance Measurement Guide for
Information Systems
SP 800-59 - Correct answer-Guideline for Identifying a System as a National
Security System
SP 800-60 - Correct answer-Mapping Information Types to Security Categories
SP 800-61, Rev 2 - Correct answer-Computer Security Incident Handling Guide
SP 800-64, Rev 2 - Correct answer-Security in SDLC
SP 800-65 - Correct answer-Integration of IT Security and Capital Planning
SP 800-66, Rev 1 - Correct answer-HIPAA
SP 800-70, Rev 2 - Correct answer-National Checklist Program
SP 800-83 - Correct answer-Malware Incident Prevention and Handling
SP 800-88, Rev 1 - Correct answer-Guidelines for Media Sanitization
©COPYRIGHT 2025, ALL RIGHTS RESERVED 2
Exam Questions and Answers Graded A+
SP 800-14 - Correct answer-GASSP - Generally Accepted Principles and Practices
for Securing Information Systems (Ethics)
SP 800-18 - Correct answer-Developing System Security Plans
SP 800-27, Rev A - Correct answer-Engineering Principles for IT Security -
Common Criteria
SP 800-30, Rev 1 - Correct answer-Conducting Risk Assessments
SP 800-34 - Correct answer-Contingency Planning Guide for Federal IT Systems
SP 800-37, Rev 1 - Correct answer-Applying RMF (Risk Management
Framework)
SP 800-39 - Correct answer-Managing Information Security Risk
SP 800-40, Rev 3 - Correct answer-Patch and Vulnerability Management Program
SP 800-41, Rev 1 - Correct answer-Firewalls and Firewall Policy
SP 800-45, Rev 2 - Correct answer-Guidelines on E-mail Security
©COPYRIGHT 2025, ALL RIGHTS RESERVED 1
, SP 800-47 - Correct answer-Security Guide for Interconnecting Information
Technology Systems
SP 800-50 - Correct answer-IT Security Awareness and Training Program
SP 800-53, Rev 4 - Correct answer-Security Controls for Federal IT Systems
SP 800-53A, Rev 4 - Correct answer-Assessing Security Controls
SP 800-55, Rev 1 - Correct answer-Performance Measurement Guide for
Information Systems
SP 800-59 - Correct answer-Guideline for Identifying a System as a National
Security System
SP 800-60 - Correct answer-Mapping Information Types to Security Categories
SP 800-61, Rev 2 - Correct answer-Computer Security Incident Handling Guide
SP 800-64, Rev 2 - Correct answer-Security in SDLC
SP 800-65 - Correct answer-Integration of IT Security and Capital Planning
SP 800-66, Rev 1 - Correct answer-HIPAA
SP 800-70, Rev 2 - Correct answer-National Checklist Program
SP 800-83 - Correct answer-Malware Incident Prevention and Handling
SP 800-88, Rev 1 - Correct answer-Guidelines for Media Sanitization
©COPYRIGHT 2025, ALL RIGHTS RESERVED 2
