CERTIFIED-IN-CYBERSECURITY Question #418: Real Exam Question with Answer & Explanation

The correct answer is C: A doctor discussing patient information without consent. An invasion of privacy is the unauthorized or unwanted access to or use of a person's personal information (see ISC2 Study Guide, Chapter 1, Module 1). A physician discussing patient information without consent is an invasion of privacy. There is no improper or unwanted access to

Security Principles

Question

Which of the following is an example of an invasion of privacy?

Options

AAnonymous medical survey research
BA company accessing a database of another company
CA doctor discussing patient information without consent
DReading a blog post

Explanation

An invasion of privacy is the unauthorized or unwanted access to or use of a person's personal information (see ISC2 Study Guide, Chapter 1, Module 1). A physician discussing patient information without consent is an invasion of privacy. There is no improper or unwanted access to or use of personal information in anonymous medical surveys. Because a blog post is publicly available, access to that information does not require authorization. Accessing another company's database does not specifically involve an invasion of privacy unless the data accessed contains personal or sensitive information about individuals. In addition, the first company may be the owner of the data, and the second company may legally only be the provider of the database service.

Topics

#Privacy#Confidentiality#Data Protection#Ethics

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice Browse All CERTIFIED-IN-CYBERSECURITY Questions