QuestionQ118

Ensuring data protection

Your company wants to identify which products it can build to help customers improve their credit scores based on their age range. To do so, you need to join user information from the company's banking app with customers' credit-score data received from a third party. Although using this raw data would enable the task, it exposes sensitive data that could be propagated into new systems.

This risk must be addressed through de-identification and tokenization with Cloud Data Loss Prevention while preserving referential integrity across the database. Which cryptographic token format should you use to meet these requirements?

  • A Deterministic encryption
  • B Secure, key-based hashes
  • C Format-preserving encryption
  • D Cryptographic hashing
Explanation

Deterministic encryption generates the same encrypted token for each occurrence of an identical input when the same cryptographic key is used. This preserves referential integrity, allowing the de-identified banking-app and third-party credit-score records to be joined without distributing the original sensitive values. It is also reversible with the original key when re-identification is required.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!