5.3. Recognize How Company Policies and Confidentiality Guidelines Protect User Data. 100-140 Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A data analyst needs to share a dataset with a third-party vendor for analysis. The dataset contains customer names, purchase amounts, and a column labeled 'product formula' that is a company trade secret. The vendor does not need the product formula. What should the analyst do?

   • AShare the dataset but replace customer names with pseudonyms
   • BShare the dataset only after encrypting it with a strong password
   • CRemove the product formula column and share only the necessary customer purchase data
   • DShare the full dataset because the vendor signed an NDA
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A new employee is cleaning out a desk and finds a printed report containing customer purchase histories. The employee is unsure whether to recycle it or shred it. What should the employee do?

   • ARecycle it because it is no longer needed
   • BLeave it on the desk for someone else to handle
   • CTake it home to dispose of later
   • DShred it because it contains confidential customer data
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which of the following is considered personally identifiable information (PII)?

   • AThe number of employees in a department
   • BA list of product serial numbers
   • CA customer's social security number
   • DA company's quarterly revenue figures
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   How does an acceptable use policy (AUP) help protect user data?

   • AIt defines what users are allowed to do with company systems and data, reducing risky behavior
   • BIt guarantees that no data will ever be lost or stolen
   • CIt prevents all external email from reaching users
   • DIt automatically encrypts all data stored on user devices
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   An employee is about to leave the company and wants to copy their work email archive to a personal USB drive to keep for reference. The archive contains confidential project documents and customer PII. What should the employee do?

   • ADo not copy any data and follow the company's offboarding process
   • BCopy only the documents that do not contain customer PII
   • CCopy the archive and delete it from the company server to avoid duplication
   • DCopy the archive because the employee created the documents
   Reveal Solution Discussion Select an answer first