(ISC)2 SSCP Systems Security Certified Practitioner Official Practice Tests, 2nd Edition

AppendixAnswers to Review Questions

Chapter 1: Security Operations and Administration (Domain 1)

1. B. Privacy is of the utmost concern when handling personally identifiable information (PII). PII includes any information that may be reasonably tied to a specific person. This would include street addresses, telephone numbers, and national ID numbers (such as Social Security numbers). Item codes, when not tied to a name or other identifier, would not constitute PII.
2. D. While all of the items listed are components of a strong security program, periodic audits would provide Carl with the assurance that controls continue to operate effectively over the long term.
3. A. The situation Darlene finds herself in is an ethical dilemma, and a code of ethics ...