#1
Which of the following is considered Personal Identifiable Information (PII)?
Email address
ExplanationEmail addresses uniquely identify individuals.
#2
What is the purpose of PII training for employees?
To understand the importance of data privacy and security
ExplanationTraining helps employees grasp data privacy concepts.
#3
What does GDPR stand for in the context of data protection?
General Data Protection Regulation
ExplanationGDPR is a regulation aimed at protecting personal data.
#4
In the context of PII, what does the term 'Data Minimization' refer to?
Collecting only the data necessary for a specific purpose
ExplanationData minimization involves limiting the collection of PII to what is necessary.
#5
What is the purpose of PII redaction?
To partially hide or obscure PII in a document
ExplanationPII redaction conceals sensitive information.
#6
Which of the following is not considered sensitive PII?
Email Address
ExplanationEmail addresses are not typically considered sensitive.
#7
Which of the following is a common method for securely storing PII?
Using encrypted databases
ExplanationEncryption protects PII from unauthorized access.
#8
Which of the following is an example of two-factor authentication?
Fingerprint and retinal scan
ExplanationTwo-factor authentication requires two forms of verification.
#9
What is the role of a Data Protection Officer (DPO) in an organization?
Ensuring compliance with data protection laws
ExplanationDPOs oversee compliance with data protection regulations.
#10
What is the principle of least privilege in relation to PII?
Giving employees access to only the PII they need to perform their job functions
ExplanationEmployees are granted minimal access to PII.
#11
What is a Data Protection Impact Assessment (DPIA) used for in relation to PII?
To identify and mitigate risks to individuals' privacy
ExplanationDPIAs assess privacy risks associated with data processing.
#12
What is the purpose of a Privacy Impact Assessment (PIA) in relation to PII?
To identify and mitigate risks to individuals' privacy
ExplanationPIAs evaluate privacy risks associated with projects or systems.