nerdexam
(ISC)2

CGRC · Question #358

Any information about an individual maintained by an agency, including (1) any information that can be used to distinguish or trace an individual's identity, such as name, social security number…

The correct answer is A. Personally Identifiable Information (PII). The question provides a detailed definition of information that can identify or be linked to an individual.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Any information about an individual maintained by an agency, including (1) any information that can be used to distinguish or trace an individual's identity, such as name, social security number, date and place of birth, mother's maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information. Response:

Options

  • APersonally Identifiable Information (PII)
  • BPrivacy Impact Assessment (PIA)
  • CCore Nodal Switching Subsystem (CNSS)
  • DIndustry Standard Architecture (ISA)

How the community answered

(48 responses)
  • A
    90% (43)
  • B
    2% (1)
  • C
    6% (3)
  • D
    2% (1)

Why each option

The question provides a detailed definition of information that can identify or be linked to an individual.

APersonally Identifiable Information (PII)Correct

Personally Identifiable Information (PII) is any information about an individual maintained by an agency that can be used to distinguish or trace an individual's identity, or that is linked or linkable to an individual. This includes direct identifiers like name and Social Security Number, as well as indirect identifiers such as medical or employment information when combined with other data. Protection of PII is a cornerstone of privacy regulations.

BPrivacy Impact Assessment (PIA)

A Privacy Impact Assessment (PIA) is a process for analyzing and documenting privacy risks, not the definition of identifying information itself.

CCore Nodal Switching Subsystem (CNSS)

Core Nodal Switching Subsystem (CNSS) is an acronym for a technical component in telecommunications, unrelated to personal information.

DIndustry Standard Architecture (ISA)

Industry Standard Architecture (ISA) refers to a type of computer bus, not a definition of personal data.

Concept tested: Personally Identifiable Information (PII) definition

Source: https://csrc.nist.gov/glossary/term/personally_identifiable_information

Topics

#Personally Identifiable Information (PII)#Data privacy#Definitions#Information types

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CGRC Practice