QuestionQ157

Application Deployment and Security

Which scenario exemplifies GDPR-compliant pseudonymization of sensitive data?

  • A implementing X-Forwarded-For at the frontend of a web app to enable the source IP addresses of headers to change
  • B separating the sensitive data into its own dedicated, secured data store and using tokens in its place.
  • C encrypting sensitive data at rest by using native cloud services and data in transit by using SSL/TLS transport.
  • D leveraging an application load balancer at the frontend of a web app for SSL/TLS decryption to inspect data in transit.
Explanation

Pseudonymization replaces identifying sensitive data with a token or other pseudonym while keeping the information needed to reconnect it to an individual separate and protected. A dedicated secured store for the original data, with tokens used in its place, meets this requirement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!