Study. uk . com
  1. Home
  2. All questions
  3. Question 13

CompTIA Security+ study material · question 13 of 611

Which RMF step determines which control baseline the system will start from?

  1. Authorize
  2. Assess
  3. Categorize
  4. Prepare
Show the answer

Answer: C. Categorize

Categorize sets the impact level of the system and its information, and that level drives baseline selection in the next step.

Source: NIST SP 800-37 Rev. 2 (NIST) — SP 800-37 Rev. 2 § 3.2 Categorize

Challenge yourself on this topic → Study as cards