Q35Security Concepts
Which item is personally identifiable information that must be protected against unauthorized access?
← → navigate · a answer
Discussion · 9
4
I guess Date of birth and driver license number are both right...
From 200-201 Training Resources:
Examples of PII data include the following:
Name, such as full name, maiden name, mother's maiden name
Telephone numbers, including home, and mobile numbers
!!!Date and place of birth!!!
Passport number, social security number, !!!driver license number!!!
Personal characteristics, including photographic image [..]
2
They are all attributes that can be used together to possibly identify you, but only the drivers licence on its own from the given list can uniquely identify you, because no one else has the same drivers number, whereas being male, having a zip code and even your date of birth are not unique to you.
2
On the exam there was only one option, so the driver license is the correct answer.
2
Personally identifiable information (PII) can be sensitive or non-sensitive.
Sensitive personal information includes items such as:
Full name
Social Security Number (SSN)
Driver’s license
Mailing address
Credit card information
Passport information
Financial information
Medical records
Non-Sensitive PII
Zip code
Race
Gender
Date of birth
Place of birth
Religion
source: https://www.investopedia.com/terms/p/personally-identifiable-information-pii.asp
1
Something isn't concidered as PII unless it's linked to a name. Without a name, a DOB or credit card number etc is not PII. Given answer is correct.
1
Although credit card is not on the list, if it was given to the credit card company they could identify you from that one piece of information alone, as no-one else will have that same credit card number. Correct answer Driving License.
1
I agree with you, there are two reliable sources for the answer. And the exam strongly deals with PII.
The National Institute of Standards and Technology (NIST) SP 800-122(4) defines personally identifiable information (PII) as "any information about an individual that is maintained by an agency, including any information that can be used to distinguish or trace an individual's identity, such as name, social security number, date and place of birth, mother's maiden name, or biometric records; and any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information."
- Understanding Cisco Cybersecurity Operations Fundamentals Official Course
1
Other:
According to the Executive Office of the President, Office of Management and Budget (OMB), and the U.S. Department of Commerce, Office of the Chief Information Officer, PII refers to “information which can be used to distinguish or trace an individual’s identity.”
The following are a few examples:
- An individual’s name
- Social security number
- Biological or personal characteristics, such as an image of distinguishing features, fingerprints, Xrays, voice signature, retina scan, and the geometry of the face
- Date and place of birth
- Mother’s maiden name
- Credit card numbers
- Bank account numbers
- Driver license number
- Address information, such as email addresses or street addresses, and telephone numbers for businesses or personal use
- Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide Omar Santos
1
So the correct answer is "AB".