9. An organization needs to block certain information from view. Which of the following should the organization use to accomplish this task?

Answer: A

Explanation:

Obfuscation is the right choice for blocking information from view.

Obfuscation is a technique used to make information unintelligible to unauthorized users, effectively blocking sensitive data from being easily understood or accessed.

A) Obfuscation

Obfuscation is a method that alters the representation of information, making it difficult for unauthorized parties to interpret or use that information. This technique is particularly effective in safeguarding sensitive data by ensuring that even if it is accessed, it remains meaningless without the proper context or key.

B) Classification policy

A classification policy is essential for categorizing data based on its sensitivity and the level of access required. However, while it helps in identifying what information needs protection, it does not actively block access to the information itself, thus not fulfilling the requirement of the organization to prevent certain information from view.

C) Verification

Verification refers to the process of ensuring that the information is accurate and that the identity of users accessing the information is authenticated. While important for security, verification does not inherently block information from being seen; it merely confirms the legitimacy of access.

D) Block rules

Block rules can be used to restrict access to certain information, but they typically operate within specific systems or software. They may not provide the comprehensive obfuscation needed to render information completely unintelligible, which is crucial for the scenario described.

Conclusion

Obfuscation stands out as the most effective choice for the organization’s need to block sensitive information from view, as it directly alters the information making it inaccessible without proper interpretation. Other options, while relevant in the context of information security, do not adequately address the requirement to prevent unauthorized access to sensitive data in the same comprehensive manner.