5.9 Identify Protected Data in a Network 200-201 Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A cyberops analyst is reviewing a data classification policy. The policy must distinguish between PII and PSI. Which data element should be classified as PSI rather than general PII?

   • AEmployee's employee ID
   • BEmployee's political affiliation
   • CEmployee's home address
   • DEmployee's email address
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is a potential risk of intellectual property theft in a network?

   • AIncreased network speed
   • BReduced need for cybersecurity measures
   • CLoss of competitive advantage and market share
   • DAutomatic compliance with all regulations
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which of the following is an example of personally sensitive information (PSI)?

   • AA person's first name
   • BA person's favorite color
   • CA person's religious beliefs
   • DA person's city of residence
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A hospital's IT system stores patient records that include names, dates of birth, medical diagnoses, and treatment plans. A security analyst is asked to classify this data. Which classification is most accurate?

   • APSI only, because medical information is sensitive personal information.
   • BPII only, because the records contain names and dates of birth.
   • CBoth PII and PHI, because the records contain identifiers and health information.
   • DPHI only, because the records are from a hospital.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A marketing analyst at a retail company receives a spreadsheet of customer records to use for a promotional campaign. The file contains names, email addresses, purchase history, and loyalty program numbers. The analyst asks the security team whether this file must be handled as protected data. What is the most accurate classification and reason?

   • AIt is PSI because purchase history is sensitive, but names and email addresses are not PII.
   • BIt is not protected data because it contains no medical or financial information.
   • CIt is PII because the combination of names and email addresses can identify individuals, and purchase history may be considered PSI.
   • DIt is PHI because the file contains customer records from a retail company.
   Reveal Solution Discussion Select an answer first