Study. uk . com
  1. Home
  2. All questions
  3. Question 643

CISM study material · question 643 of 1000

Which specific risk does NIST identify when two systems are interconnected?

  1. Neither system can be authorised independently thereafter
  2. The connection reduces the availability of both systems
  3. A compromise of one system can travel the link and reach the other system and its data
  4. Both of the systems must adopt the higher categorisation of the two once they have been connected
Show the answer

Answer: C. A compromise of one system can travel the link and reach the other system and its data

SP 800-100 warns a badly designed link can let security failures reach the systems joined by it, and that a compromise on one side can travel the connection to the other side's system and data.

Source: NIST SP 800-100 (NIST) — Ch. 6 Interconnecting Systems

Challenge yourself on this topic → Study as cards