Identifying and Safeguarding Personally Identifiable
Information (PII) 100% ACCURATE!!
What guidance identifies federal information security controls? correct answers OMB
Memorandum M-17-12: Preparing for and Responding to a Breach of Personally Identifiable
Information
True or False? Information that can be combined with other information to link solely to an
individual is considered PII. correct answers True
If someone tampers with or steals an individual's PII, they could be exposed to which of the
following? correct answers All of the above (Embarrassment, Fraud, Identity Theft)
An organization with an existing system of record decides to start using PII for a new purpose
outside the "routine use" defined in the System of Records Notice (SORN). Is this a permitted
use? correct answers No
True or False? A System of Records Notice (SORN) is not required if an organization
determines that PII will be stored using a system of records. correct answers False
Which of the following are examples of PII? correct answers Social Security Number (SSN),
Driver's License Number, and Fingerprint.
This regulation governs the DoD Privacy Program.
This law establishes the public's right to access federal government information.
This guidance identifies federal information security controls.
This law establishes the federal government's legal responsibility for safeguarding PII.
correct answers DoD 5400.11-R: DoD Privacy Program
FOIA
OMB M-17-12
Privacy Act of 1974
The individual to whom the record pertains has submitted a written request for the
information in question. correct answers This use/disclosure is authorized.
Information (PII) 100% ACCURATE!!
What guidance identifies federal information security controls? correct answers OMB
Memorandum M-17-12: Preparing for and Responding to a Breach of Personally Identifiable
Information
True or False? Information that can be combined with other information to link solely to an
individual is considered PII. correct answers True
If someone tampers with or steals an individual's PII, they could be exposed to which of the
following? correct answers All of the above (Embarrassment, Fraud, Identity Theft)
An organization with an existing system of record decides to start using PII for a new purpose
outside the "routine use" defined in the System of Records Notice (SORN). Is this a permitted
use? correct answers No
True or False? A System of Records Notice (SORN) is not required if an organization
determines that PII will be stored using a system of records. correct answers False
Which of the following are examples of PII? correct answers Social Security Number (SSN),
Driver's License Number, and Fingerprint.
This regulation governs the DoD Privacy Program.
This law establishes the public's right to access federal government information.
This guidance identifies federal information security controls.
This law establishes the federal government's legal responsibility for safeguarding PII.
correct answers DoD 5400.11-R: DoD Privacy Program
FOIA
OMB M-17-12
Privacy Act of 1974
The individual to whom the record pertains has submitted a written request for the
information in question. correct answers This use/disclosure is authorized.
