A health app collects users' fitness data, including heart rate and sleep patterns. The app is not affiliated with a healthcare provider. Which statement about this data is correct?

The data is PHI because it is stored in the cloud

The data is not PHI because it is not collected by a covered entity

The data is PHI because it is personally identifiable

The data is PHI because it is health-related

Why is it important to protect personally identifiable information (PII) in a network?

To reduce the amount of storage space used on servers

To ensure that network traffic is encrypted at all times

To comply with internal naming conventions for data files

To prevent identity theft and financial fraud

What is the primary difference between personally identifiable information (PII) and personally sensitive information (PSI)?

PSI refers to data about organizations, while PII refers to data about individuals

PSI is a subset of PII that requires a higher level of protection due to its sensitive nature

PII is regulated by law, while PSI is not regulated

PII is always encrypted, while PSI is never encrypted

Which of the following is an example of protected health information (PHI)?

A patient's medical diagnosis and treatment plan

A list of medications available in a pharmacy

A hospital's annual budget report

The number of beds in a hospital

CiscoCertified CyberOps Associate

Domain 5Objective 9

5.9 Identify Protected Data in a Network 200-201 Practice Questions (Page 4)

Part of the 5.0 Security Policies and Procedures domain, which accounts for 15% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

15%of the exam

Questions 16–20

16application · medium
A cyberops analyst is responding to a data breach that exposed customer PII. The company must notify affected individuals. Which consequence is the company most likely trying to mitigate by providing notification?
Select an answer first
17expert · hard
A health app collects users' fitness data, including heart rate and sleep patterns. The app is not affiliated with a healthcare provider. Which statement about this data is correct?
Select an answer first
18foundation · easy
Why is it important to protect personally identifiable information (PII) in a network?
Select an answer first
19foundation · easy
What is the primary difference between personally identifiable information (PII) and personally sensitive information (PSI)?
Select an answer first
20foundation · easy
Which of the following is an example of protected health information (PHI)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.