CISSP Crash Course - Information Assets

The video tutorial covers data and ownership, focusing on information assets like PII, PHI, and proprietary data. It explains data classification levels and their potential impacts, discusses how data is used in systems, and outlines methods for data protection and compliance. Key topics include encryption, data at rest, in transit, and in use, and the importance of understanding legal requirements for data handling.

Which of the following is considered Personally Identifiable Information (PII)?

• A software's source code

• An individual's Social Security number

• A hospital's internal process

• A company's trade secret

What type of data classification could cause exceptionally grave damage if disclosed?

• Sensitive

• Top Secret

• Confidential

• Public

Which classification level is used by non-government organizations to indicate the highest level of sensitivity?

• Class 3

• Class 2

• Class 1

• Class 0

What is the primary method of protecting data at rest?

• Homomorphic encryption

• Symmetric encryption

• Asymmetric encryption

• Memory flushing

Data in transit is best described as:

• Data encrypted with a single key

• Data moving across a network

• Data stored on a hard disk

• Data being processed in memory

Which encryption method allows data to be processed without decryption?

• Memory flushing

• Homomorphic encryption

• Symmetric encryption

• Asymmetric encryption

Which of the following is a compliance requirement for financial institutions?

• GDPR

• PCI

• FOIA

• HIPAA