Examkin

Question

Difficulty: MediumData Governance, Classification, and Privacy Controls

An enterprise organization is updating its global data governance standards to comply with privacy regulations. Match each data privacy control on the left with its corresponding operational implementation on the right.

  • PseudonymizationReplacing direct identifiers with artificial keys, while storing a separate key mapping securely to allow authorized re-identification.
  • Data MinimizationRestricting data collection, processing, and retention strictly to what is necessary for a specific, explicit business purpose.
  • Data SovereigntyEnforcing compliance policies that require data storage and processing to abide by the laws of the host nation where it is collected.
  • Data MaskingConcealing sensitive data fields on user interface screens or reports by replacing characters with placeholders such as asterisks.

Answer

Pseudonymization matches with replacing direct identifiers with artificial keys while storing a separate key mapping securely; Data Minimization matches with restricting data collection, processing, and retention strictly to what is necessary; Data Sovereignty matches with enforcing compliance policies requiring data storage to abide by local laws; Data Masking matches with concealing sensitive data fields on interface screens using placeholders.
Each data privacy term correctly maps to its foundational CompTIA Security+ operational control definition.

Step-by-Step Solution

1
Identify the operational mechanics of Pseudonymization
Pseudonymization replaces PII fields with unique aliases, keeping the re-identification key in a separate, secure location.
Unlike full anonymization, pseudonymized data can be reversed back to its original form using controlled mapping keys.
2
Determine the rule defining Data Minimization
Data Minimization mandates collecting only the minimum data required to satisfy a specific business function.
This practice limits exposure and regulatory risk by eliminating superfluous sensitive data storage.
3
Define the geographic requirement of Data Sovereignty
Data Sovereignty subjects digital data to the local privacy laws and judicial mandates of the host country.
Organizations must comply with regional storage location rules and cross-border transfer limits.
4
Identify the presentation control used in Data Masking
Data Masking obscures display fields (such as showing only the last 4 digits of a card) to prevent shoulder surfing and unauthorized viewing.
Masking alters how data is shown on screens without necessarily changing the underlying encrypted database structure.

Key Concept

Data Privacy Controls and Implementation Mechanisms
Rate this question

Topics

Data Governance, Classification, and Privacy Controls

More questions from this topic