Examkin

Question

Difficulty: EasyData Governance, Classification, and Privacy Controls

A software developer is building an internal customer portal. To safeguard sensitive payment details, the portal must visually hide all but the last four digits of a user's credit card number when viewed by support staff, while keeping the original stored data intact for transaction processing. Which of the following control techniques best achieves this requirement?

  1. Data maskingAnswer
  2. B
    Data custodian access delegation
  3. C
    User authentication verification
  4. D
    Detective audit logging

Answer

Data masking
Data masking is a privacy control that replaces or redacts sensitive data elements when rendered on screen, while preserving the full, original dataset in secure storage for processing.

Step-by-Step Solution

1
Identify the primary operational requirement.
The requirement is to visually conceal sensitive account numbers on screen while leaving the underlying database records intact.
Customer support representatives only need to verify card identity without seeing full sensitive numbers.
2
Evaluate data protection controls.
Data masking redacts or replaces characters (e.g., showing ** ** 1234) for display purposes without altering stored data.
This technique provides effective privacy protection against shoulder surfing or unnecessary data exposure during support interactions.

Key Concept

Data Masking and Privacy Obfuscation
Rate this question

Topics

Data Governance, Classification, and Privacy Controls

More questions from this topic