A research institute wants to share a dataset of patient health records with multiple universities for a longitudinal study. The dataset includes rare disease diagnoses, which could make individuals identifiable even after removing names. The institute must comply with data protection regulations. Which approach best minimizes re-identification risk while preserving the study's scientific value?

Share the raw data with universities that sign a confidentiality agreement.

Remove all diagnosis codes and keep only demographic data.

Apply k-anonymity by generalizing rare diagnoses to broader categories.

Encrypt the dataset and provide the decryption key to each university.

A user receives an email that appears to be from their bank, asking them to verify their account details by clicking a link. The user notices the sender's address is a free email service and the link points to a domain that is not the bank's official website. What is the most appropriate immediate action for the user?

Report the email as phishing and delete it without clicking any links.

Click the link but do not enter any personal information.

Reply to the email asking for verification of the sender's identity.

Forward the email to colleagues to warn them about the scam.

A journalist working on a sensitive story needs to communicate with a source securely. The journalist is concerned about both government surveillance and data breaches. Which combination of practices provides the strongest privacy protection for the communication?

Use a shared document with link sharing set to 'anyone with the link'.

Use a standard email service with a strong password.

Use end-to-end encrypted messaging and avoid metadata-rich platforms.

Post the message on a public forum and delete it after the source reads it.

A user discovers that a data broker has been collecting and selling their purchase history, which was obtained from loyalty card programs. The user wants to reduce the risk of this happening in the future. Which action is most effective?

Use a credit card that offers cashback rewards.

Provide a fake name when signing up for loyalty programs.

Use cash instead of loyalty cards for purchases.

Share the loyalty card number with friends to increase rewards.

LPI Security Essentials

Domain 5Objective 3

025.3 Privacy Protection (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 6)

Part of the 025 Identity and Privacy domain, which makes up ~22% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

Questions 26–30

26expert · hard
A research institute wants to share a dataset of patient health records with multiple universities for a longitudinal study. The dataset includes rare disease diagnoses, which could make individuals identifiable even after removing names. The institute must comply with data protection regulations. Which approach best minimizes re-identification risk while preserving the study's scientific value?
Select an answer first
27application · medium
A user receives an email that appears to be from their bank, asking them to verify their account details by clicking a link. The user notices the sender's address is a free email service and the link points to a domain that is not the bank's official website. What is the most appropriate immediate action for the user?
Select an answer first
28expert · hard
A journalist working on a sensitive story needs to communicate with a source securely. The journalist is concerned about both government surveillance and data breaches. Which combination of practices provides the strongest privacy protection for the communication?
Select an answer first
29application · medium
A user discovers that a data broker has been collecting and selling their purchase history, which was obtained from loyalty card programs. The user wants to reduce the risk of this happening in the future. Which action is most effective?
Select an answer first
30foundation · easy
What is a common privacy risk that occurs when an unauthorized party gains access to a database containing personal information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

025.3 Privacy Protection (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 6)

Questions 26–30

A journalist working on a sensitive story needs to communicate with a source securely. The journalist is concerned about both government surveillance and data breaches. Which combination of practices provides the strongest privacy protection for the communication?

A user discovers that a data broker has been collecting and selling their purchase history, which was obtained from loyalty card programs. The user wants to reduce the risk of this happening in the future. Which action is most effective?

What is a common privacy risk that occurs when an unauthorized party gains access to a database containing personal information?

Keep studying — 025 Identity and Privacy