FITSP Operator Practice Test 2026 – Complete Exam Prep

The main idea here is how incident types map to impact-based categories. Denial of Service attacks affect availability: they prevent legitimate users from accessing a service or disrupt normal operations. In the Federal Agency Incident Reporting Categories, incidents are organized by the severity of their impact on mission operations. An availability disruption from a DoS event is considered a moderate impact, which is categorized as Category 2.

This reflects that the incident hampers service accessibility and operational capability, but it doesn’t automatically imply a breach of confidentiality or alteration of data, nor does it necessarily constitute the most severe level of impact. Higher categories would be used for events with more critical consequences (such as widespread, mission-critical outages with cascading effects) or for incidents that involve data loss or exposure. Lower categories cover minimal or no noticeable impact.

So, a Denial of Service incident fits Category 2 because its primary effect is to degrade or deny access to services, representing moderate impact on operations.