ISC2 CC Security Principles Practice Question
A company stores customer PII including social security numbers and medical records. Under privacy principles, these data elements are best described as:
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Sensitive PII
Medical records and SSNs are examples of sensitive PII that require additional protection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Confidential data
Why it's wrong here
While these are confidential, the specific term for such highly sensitive personal data is 'sensitive PII'.
- ✗
Internal data
Why it's wrong here
Internal data is broader and may not be as sensitive as SSNs and medical records.
- ✓
Sensitive PII
Why this is correct
SSN and medical records are considered sensitive PII.
- ✗
Public data
Why it's wrong here
Public data is not sensitive.
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Privacy
Privacy in IT is the control over how personal data is collected, stored, used, and shared by systems and organizations.
Key term
PII
PII stands for Personally Identifiable Information, which is any data that can be used to identify a specific individual.
About these practice questions
One of 976 original CC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.