According to private sector data classification levels, how would salary levels and medical information be
classified?

A.
Public.

B.
Internal Use Only.

C.
Restricted.

D.
Confidential.

Explanation:
Data such as salary levels and medical information would be classified as confidential according to private
sector data classification levels.
The following shows the common levels of sensitivity from the highest to the lowest for commercial business
(public sector):
Confidential
Private
Sensitive
Public
Incorrect Answers:
A: Salary levels and medical information are confidential data which would not fall under the Public
classification.
B: Internal Use Only is not typically used as classification level in the private sector. Internal Use Only falls
under the Confidential classification.
C: Restricted is not used as classification level in the private sector; it is more commonly used in military or
governmental classifications.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 111