200-201 Question 390
Select 3You are working as a security analyst for a company, and you receive a report about a potential data breach involving customer information. During your investigation, you identify that the exposed data includes full names, Social Security Numbers (SSNs), email addresses, and account passwords. Based on the information exposed, which of the following items would be classified as Personally Identifiable Information (PII)? Select all that apply.
- A
Full names
- B
Social Security Numbers (SSNs)
- C
Email addresses
- D
Account passwords
Show answer and explanation
Correct answers: A, B, C
Explanation
Personally Identifiable Information (PII) includes any data that can directly or indirectly identify an individual. In this scenario, full names, Social Security Numbers (SSNs), and email addresses are all PII because they help identify individuals or can be linked to other identifying information. While account passwords are sensitive, they are not categorized as PII since they do not inherently identify a person.
- A. Correct.
Full names are classified as PII because they can be used to identify an individual when combined with other data.
- B. Correct.
Social Security Numbers (SSNs) are highly sensitive PII because they are unique to individuals and often used for identity verification.
- C. Correct.
Email addresses are considered PII because they can be directly linked to an individual and used for personal communication or identification.
- D. Incorrect.
Account passwords are not classified as PII because they do not directly identify an individual. However, they are considered sensitive data and should be protected.