CompTIA Security+ Exam | SY0-601: Answering Policy Questions

Determining Breach Occurrence: Security Policy Consultation

Prev Question Next Question

Question

An office manager found a folder that included documents with various types of data relating to corporate clients.

The office manager notified the data included dates of birth, addresses, and phone numbers for the clients.

The office manager then reported this finding to the security compliance officer.

Which of the following portions of the policy would the security officer need to consult to determine if a breach has occurred?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

The security compliance officer needs to consult the policy regarding Personally Identifiable Information (PII) to determine if a breach has occurred.

PII refers to any information that can be used to identify an individual. This can include a person's name, address, phone number, email address, Social Security number, date of birth, and more. In the scenario described in the question, the folder contains PII of the corporate clients, including their dates of birth, addresses, and phone numbers.

When a breach of PII occurs, it means that an unauthorized individual or entity has gained access to this sensitive information. The policy regarding PII will outline the steps that need to be taken in the event of a breach, including notification of affected individuals, legal requirements, and potential consequences for the organization.

It is worth noting that PHI (Protected Health Information) is a type of PII that specifically refers to health-related information, such as medical records or diagnoses. While this may be relevant in some contexts, it is not directly applicable in the scenario described in the question. Additionally, the terms "public" and "private" are not specific enough to determine the appropriate policy in this situation.