5.9 Identify Protected Data in a Network 200-201 Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A data breach exposes a database containing customer names, email addresses, and purchase history. The company also stores customer religious preferences in a separate field. Which data element requires the most urgent regulatory attention?

   • ACustomer names
   • BPurchase history
   • CReligious preferences
   • DEmail addresses
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is an example of personally identifiable information (PII)?

   • AThe total number of employees in a company
   • BA user's social security number
   • CThe model number of a company's server
   • DThe IP address of a network printer
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A hospital's network team is configuring access controls for a new patient portal. Which data element must be protected under HIPAA?

   • APatient's shoe size
   • BPatient's favorite color
   • CPatient's medical record number
   • DPatient's loyalty program number
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a potential consequence of exposing personally identifiable information (PII) in a data breach?

   • AImproved customer trust in the organization
   • BIncreased network bandwidth for all users
   • CLegal and regulatory penalties for the organization
   • DAutomatic deletion of all backup files
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A help desk technician accidentally emails a spreadsheet containing employee names, social security numbers, and home addresses to an incorrect internal distribution list. The email was sent to 50 employees who did not have a need to know. What is the most immediate and appropriate response?

   • ASend a follow-up email asking recipients to delete the message without reading it.
   • BDelete the email from the technician's sent folder and assume the risk is low because the recipients are internal.
   • CAsk the technician to recall the email and then continue normal operations.
   • DReport the incident to the security team and begin the incident response process for a potential data exposure.
   Reveal Solution Discussion Select an answer first