Soru

Zorluk: KolayData Governance, Classification, and Privacy Controls

A software developer is building an internal customer portal. To safeguard sensitive payment details, the portal must visually hide all but the last four digits of a user's credit card number when viewed by support staff, while keeping the original stored data intact for transaction processing. Which of the following control techniques best achieves this requirement?

  1. Data maskingCevap
  2. B
    Data custodian access delegation
  3. C
    User authentication verification
  4. D
    Detective audit logging

Cevap

Data masking
Data masking is a privacy control that replaces or redacts sensitive data elements when rendered on screen, while preserving the full, original dataset in secure storage for processing.

Adım Adım Çözüm

1
Identify the primary operational requirement.
The requirement is to visually conceal sensitive account numbers on screen while leaving the underlying database records intact.
Customer support representatives only need to verify card identity without seeing full sensitive numbers.
2
Evaluate data protection controls.
Data masking redacts or replaces characters (e.g., showing ** ** 1234) for display purposes without altering stored data.
This technique provides effective privacy protection against shoulder surfing or unnecessary data exposure during support interactions.

Anahtar Kavram

Data Masking and Privacy Obfuscation
Bu soruyu puanla