100-140 Question 362
Single answerYou are an IT support technician for a company that handles sensitive customer data. A new employee in the marketing department asks you to share a list of customer email addresses for a campaign. According to company policies and confidentiality guidelines, what should you do?
- A
Share the email list with the employee, as they are part of the company.
- B
Verify if the employee has the appropriate authorization and approval, and only share the data if it complies with company policies.
- C
Refuse the request immediately, as customer data cannot be shared with anyone within the organization.
- D
Share the data after encrypting the file to ensure it is secure.
Show answer and explanation
Correct answer: B
Explanation
Company policies and confidentiality guidelines are designed to protect sensitive user data by regulating who can access it and under what circumstances. Verifying authorization and approvals before sharing such data ensures compliance with these policies while minimizing the risk of data breaches or misuse.
- A. Incorrect.
Sharing the email list without verifying authorization violates company policies and confidentiality guidelines, as access to sensitive data should be based on need-to-know and proper approval.
- B. Correct.
This is the correct approach as it ensures that the request aligns with company policies and confidentiality guidelines. Verifying authorization and approvals safeguards sensitive data and prevents misuse.
- C. Incorrect.
Refusing the request immediately is unnecessary and may hinder legitimate tasks. Data can be shared if policies and security measures are followed.
- D. Incorrect.
Encrypting the data does not address the fundamental requirement of verifying whether the employee is authorized to access sensitive customer information.