SP 800-83 is the guide to Malware Incident Prevention and Handling. Which of the following does it define?

• A. Malware categories and types
• B. Network perimeter architectures
• C. Cloud service models
• D. Data classification schemes

Answer: (A)

The main concept being tested is how SP 800-83 categorizes malware to support prevention and incident handling. This publication provides a taxonomy of malware—categories and types—so responders can recognize, communicate about, and appropriately respond to different threats. By classifying malware (for example, identifying common families or behavior patterns), analysts can quickly map observed activity to a known threat profile and choose suitable containment, eradication, and recovery actions. The other topics—network perimeter architectures, cloud service models, and data classification schemes—lie outside the scope of this guide, which is focused specifically on malware incident prevention and handling.