A+ - 19C - Explain Data Handling Best Practices

What is regulated data?

• Information that must comply with organizational policies

• Information collected, processed, and stored in compliance with federal and/or state legislation

• Information accessible to all employees

• Information stored without any security measures

What is a breach?

• Authorized access to data

• Unauthorized access to data

• Secure transfer of data

• Routine maintenance of data

Which of the following is an example of personally identifiable information (PII)?

• Company's address

• Generic email address

• Social security number (SSN)

• Public domain information

What is an example of personal government-issued information?

• Employee ID card

• Company logo

• Internal memo

• Public website

Which standard governs the processing of credit card transactions?

• ISO 9001

• PCI DSS

• HIPAA

• GDPR

What is the purpose of an end-user license agreement (EULA)?

• To limit the number of users

• To permit unlimited distribution

• To set terms and conditions for software use

• To prohibit software installation

Which method ensures old data is destroyed by writing to each location on a hard disk drive?

• Low level format

• Degaussing

• Incineration

• Shredding

What is the role of a Computer Security Incident Response Team (CSIRT)?

• Data encryption

• Incident reporting

• Physical security

• Software licensing

What is the purpose of documenting the scene of a security incident?

• To preserve evidence

• To erase data

• To delete evidence

• To share information

Which method of data destruction involves melting a disk's components with high heat?

• Degaussing

• Shredding

• Incineration

• Low level format