easyMultiple ChoiceObjective-mapped
200-201 Practice Question: An organization's data classification policy…
An organization's data classification policy defines four levels: Public, Internal, Confidential, and Restricted. An employee accidentally sends an email containing customer payment card information (PCI) to the entire company mailing list. The data should have been classified as which level?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Restricted
Payment card information (PCI) is highly sensitive data protected by regulations like PCI DSS. In the organization's classification, Restricted is the highest level, intended for data whose unauthorized disclosure could cause severe harm or legal penalties. The other levels are less restrictive: Public is non-sensitive, Internal is for internal use but not highly sensitive, and Confidential is sensitive but not as critical as Restricted. Therefore, the correct classification is Restricted (Option B).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Public
Why it's wrong here
Public data is intended for external release; PCI data must never be public.
- ✓
Restricted
Why this is correct
Restricted is for data whose disclosure would cause severe harm, such as PCI data.
- ✗
Internal
Why it's wrong here
Internal data may be company-wide but PCI data requires stricter handling.
- ✗
Confidential
Why it's wrong here
Confidential is for sensitive business data, but PCI data often requires the highest level.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-201 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.