← Back to the standards body

Knowledge check

FIPS 140-3 and the CMVP: what 'FIPS validated' actually means

10 questions testing what you just read — no login, no tracking, just immediate feedback.

Question 1 of 10

What does FIPS 140-3 specify, compared with FIPS 197?

Question 2 of 10

Who runs the Cryptographic Module Validation Program (CMVP)?

Question 3 of 10

Which international standard does FIPS 140-3 adopt for its security requirements?

Question 4 of 10

A module scores Level 3 in every area except physical security, where it scores Level 2. What is its overall security level?

Question 5 of 10

Which capability is required at Level 4 but not at Level 3?

Question 6 of 10

What does the CAVP do, as distinct from the CMVP?

Question 7 of 10

Why does FIPS 140-3 require an approved service indicator?

Question 8 of 10

Which of these is a pre-operational self-test?

Question 9 of 10

A vendor says its product is 'in process' for FIPS 140-3. What does that mean for a buyer who needs validated cryptography today?

Question 10 of 10

What happened to FIPS 140-2 certificates in September 2026?

0 / 10 answered