nerdexam
(ISC)2

SSCP · Question #995

According to private sector data classification levels, how would salary levels and medical information be classified?

The correct answer is D. Confidential. In private sector data classification schemes, Confidential is the category reserved for sensitive business information whose unauthorized disclosure could harm individuals or the organization. Salary data and medical records are classic examples of Confidential data because…

Submitted by miguelv· Apr 18, 2026Security Concepts and Practices

Question

According to private sector data classification levels, how would salary levels and medical information be classified?

Options

  • APublic.
  • BInternal Use Only.
  • CRestricted.
  • DConfidential.

How the community answered

(54 responses)
  • A
    4% (2)
  • C
    2% (1)
  • D
    94% (51)

Explanation

In private sector data classification schemes, Confidential is the category reserved for sensitive business information whose unauthorized disclosure could harm individuals or the organization. Salary data and medical records are classic examples of Confidential data because they are personal, legally protected (e.g., HIPAA for medical data), and restricted to those with a need to know. Public (A) data is freely shareable, Internal Use Only (B) is non-sensitive internal information, and Restricted (C) is typically the highest classification tier reserved for the most critical trade secrets or top-level business strategies.

Topics

#data classification#sensitive data#PII#information security policies

Community Discussion

No community discussion yet for this question.

Full SSCP Practice