IR 7298 Glossary of Key Information Security Terms includes terms from which sources?

• A. NIST publications, FIPS, NISTIR and CNSSI-4009
• B. ISO/IEC standards
• C. ANSI standards
• D. IEEE standards

Answer: (A)

This item tests knowledge of where the IR 7298 Glossary draws its definitions from. The glossary is built from U.S. government and national standard sources to provide a consistent vocabulary across federal information security programs. Specifically, it pulls terms from NIST publications, FIPS (Federal Information Processing Standards), NIST Interagency Reports (NISTIR), and the CNSSI-4009 National Information Assurance Glossary. Those sources are authoritative references used to shape the terminology used in federal cybersecurity guidance and documents, ensuring everyone uses the same definitions. ISO/IEC standards, ANSI standards, or IEEE standards are not the primary sources for this glossary, since the focus is on U.S. government security terminology defined by NIST and CNSSI materials.