Examkin

Soru

Zorluk: OrtaData Governance, Classification, and Privacy Controls

An enterprise financial platform is establishing privacy-enhancing controls across its data processing pipelines. Match each data protection technology to its correct operational application.

  • PseudonymizationReplaces primary identifiers with reversible artificial aliases, requiring separate cryptographic keys or mapping tables to re-identify individuals.
  • Data MaskingObfuscates explicit characters (such as showing only the last four digits of an account number) during user interface rendering.
  • TokenizationReplaces sensitive data elements with non-sensitive surrogate tokens managed through an isolated, secure lookup vault.
  • AnonymizationIrreversibly alters personal data so that the individual can no longer be identified directly or indirectly by any party.

Cevap

Pseudonymization matches with replacing identifiers with reversible artificial aliases requiring separate keys; Data Masking matches with obfuscating explicit characters during user interface rendering; Tokenization matches with replacing sensitive elements with surrogate tokens in a secure vault; Anonymization matches with irreversibly altering personal data.
Each technology aligns with its specific privacy objective: Pseudonymization provides reversible identifier substitution using separate keys; Data Masking obfuscates characters on screen; Tokenization maps values to non-sensitive tokens in a secure vault; and Anonymization permanently removes all re-identification capability.

Adım Adım Çözüm

1
Analyze Pseudonymization requirements
Identify that pseudonymization replaces direct identifiers with pseudonyms while retaining reversibility via separate cryptographic keys or mapping tables.
Regulatory privacy frameworks explicitly define pseudonymization as reversible data de-identification using separate control keys.
2
Analyze Data Masking functionality
Identify that data masking partially redacts or obfuscates characters (e.g., showing **** 1234) for screen output rendering.
Data masking focuses on presentation-layer field obfuscation to protect sensitive values from unauthorized viewers during display.
3
Analyze Tokenization implementation
Identify that tokenization replaces sensitive data with non-sensitive surrogate values resolved through a secure token vault.
Tokenization avoids storing encrypted values in application databases by substituting tokens backed by a centralized lookup vault.
4
Analyze Anonymization properties
Identify that anonymization is an irreversible process that completely removes re-identification capabilities.
Unlike pseudonymization, anonymization permanently strips identity links, removing the dataset from PII compliance scope.

Anahtar Kavram

Privacy-enhancing technologies and data protection controls
Bu soruyu puanla

Konular

Data Governance, Classification, and Privacy Controls

Bu konudan daha fazla soru