Confidentiality and Privacy

1 / 16
Question

Why is encryption used for confidential data?

Tap to flip
Answer

It protects data at rest and in transit.

Tap to flip back
Question

Why is data classification a core confidentiality control?

Tap to flip
Answer

It matches protection level to data sensitivity.

Tap to flip back
Question

What should a tester do to verify DLP controls?

Tap to flip
Answer

Attempt to exfiltrate test data and see if it is blocked.

Tap to flip back
Question

Why must personal data have a retention schedule?

Tap to flip
Answer

To ensure secure disposal when no longer needed.

Tap to flip back