A systems administrator works for a local hospital and needs to ensure patient data is protected and secure. Which of the following data classifications should be used to secure patient data?

Question

Options

• APrivate
• BCritical
• CSensitive
• DPublic

• A
  2% (1)
• B
  7% (4)
• C
  88% (49)
• D
  4% (2)

Explanation

Sensitive is the correct classification because it specifically covers data that requires protection due to legal, ethical, or privacy obligations - patient health information (PHI) falls squarely in this category, governed by regulations like HIPAA.

Private (A) refers to data restricted to internal organizational use (e.g., internal memos, employee records), but it doesn't carry the same regulatory and compliance weight as medical records. Critical (B) describes data vital to business operations or continuity - it's about availability and impact, not confidentiality or privacy. Public (D) is data intentionally available to anyone, the opposite of what patient records require.

Memory tip: Think "Sensitive = Special protection required." Whenever you see medical, financial, or legal personal data on the exam, sensitive is the classification that signals "handle with care - there are laws about this."

No community discussion yet for this question.