#1
What does PII stand for in the context of sensitive information?
Private Internet Information
Personal Identification Information
Protected Identity Index
Public Information Identifier
#2
Which of the following is NOT an example of sensitive information?
Social Security Number
Home Address
Publicly Available Company Information
Bank Account Number
#3
What does PHI stand for in the context of sensitive healthcare information?
Personal Health Information
Protected Health Information
Public Health Information
Private Health Information
#4
Which of the following is NOT considered a best practice for handling sensitive information?
Regularly updating security measures
Sharing passwords with trusted colleagues
Implementing access controls
Encrypting sensitive data
#5
Which of the following is NOT a common type of sensitive information?
Financial data
Health records
Publicly available information
Customer passwords
#6
What is the primary objective of information sensitivity analysis?
To identify all sensitive information
To determine the potential impact of information disclosure
To increase the overall sensitivity of information
To prevent access to sensitive information
#7
What does GDPR stand for?
Global Data Privacy Regulation
General Data Protection Regulation
General Data Privacy Regulation
Global Data Protection Regulation
#8
What is the process of removing sensitive information from a document or dataset called?
Encryption
Decryption
Anonymization
Authorization
#9
What is the principle of least privilege in information security?
Granting users only the access they need to perform their duties
Granting users maximum access rights to minimize inconvenience
Allowing unrestricted access to all users
Revoking all access rights
#10
What is the purpose of a data classification policy?
To restrict access to sensitive information
To determine the value of data
To define how data should be classified and protected
To allow unrestricted sharing of data
#11
Which of the following is an example of a technical safeguard for sensitive information?
Employee training programs
Non-disclosure agreements
Access controls
Security awareness posters
#12
What is the primary goal of information classification?
To determine who can access information
To determine the value of information
To define how information should be protected
To allow unrestricted sharing of information
#13
Which of the following is an example of a physical safeguard for sensitive information?
Firewall
Biometric Authentication
Encryption
Locked Filing Cabinet
#14
Which of the following is NOT a common method of securely disposing of sensitive information?
Shredding
Burning
Posting on social media
Degaussing
#15
What is the main purpose of data masking?
To prevent unauthorized access to data
To obfuscate sensitive data
To securely store data
To authenticate users
#16
What is the purpose of a clean desk policy in handling sensitive information?
To reduce clutter in the workspace
To prevent unauthorized access to sensitive information
To encourage recycling
To allow employees to decorate their desks freely
#17
Which of the following is NOT a potential consequence of mishandling sensitive information?
Loss of customer trust
Legal penalties
Increased efficiency
Financial loss
#18
What is the primary goal of a data retention policy?
To permanently delete all data
To determine how long data should be kept
To increase data accessibility
To allow unlimited data storage