CISSP Module 2

What is one of the first steps in asset security?

• Implementing a firewall

• Identifying and classifying information and assets

• Conducting a security audit

• Training employees on security protocols

What does the acronym PII stand for?

• Public Information Identifier

• Personally Identifiable Information

• Protected Information Identifier

• Proprietary Information Identifier

According to HIPAA; Protected Health information (or PHI)

refers to information, whether oral or recorded in any form, that includes:

• Information received or created by a health plan, health care provider, employer, public health authority, school or university, or life insurer

• Information related to past, present or future payments for health care of an individual

• Information received or created about an individuals health used by a home insurer or automobile insurer

• Information related to past, present or future mental or physical condition or health of an individual

Which of the following could be considered proprietary data?

• Public financial reports

• Technical plans for products

• Social media posts

• Customer reviews

What is the primary purpose of proprietary data for an organization?

• To share with competitors

• To maintain a competitive edge

• To publish in public forums

• To use for marketing campaigns

What classification level is associated with "Exceptionally Grave Damage" in government classifications?

• Class 0

• Class 1

• Class 2

• Class 3

Which classification level is associated with "Serious Damage" in nongovernment classifications?

• Class 0

• Class 1

• Class 2

• Class 3

What are the Three States of Data?

• At Rest

• In Transit

• In Use

• In Cloud

With regards to Asset Retention;

How long does HIPAA require a healthcare organization to maintain an individuals records?

• 3 years

• 5 years

• 6 years

• 10 years

Which regulation governs organizations that handle Credit Card Transactions?

• PBS NPR

• PBA ABC

• PCI DSS

• PGA GLF