ISC Risk Management Practice Question
An engineering team is designing a new cloud infrastructure. To ensure the system complies with FIPS 140-3, which action must the ISSEP verify during the design phase?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
That all cryptographic modules utilized by the system are FIPS 140-3 validated.
FIPS 140-3 certification is specific to the cryptographic modules used within the system. The ISSEP must ensure that all cryptographic operations are handled by modules validated to this standard.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
That the system uses TLS 1.3 for data in transit.
Why it's wrong here
TLS 1.3 is a protocol, not a module validation standard.
- ✗
That the cloud management console uses Multi-Factor Authentication (MFA).
Why it's wrong here
MFA is an access control requirement, unrelated to FIPS 140-3 cryptographic module validation.
- ✓
That all cryptographic modules utilized by the system are FIPS 140-3 validated.
Why this is correct
This is the core requirement of FIPS 140-3 compliance for an engineered system.
- ✗
That the cloud provider's storage is encrypted at rest.
Why it's wrong here
Encryption at rest is good, but it does not specify FIPS 140-3 compliance for the cryptographic module.
About these practice questions
One of 209 original ISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.