Certified Cloud Security Professional – CCSP – Question321

What process entails taking sensitive data and removing the indirect identifiers from each data object so that the identification of a single entity would not be possible?

A.
Tokenization
B. Encryption
C. Anonymization
D. Masking

Correct Answer: C

Explanation:

Explanation: Anonymization is a type of masking, where indirect identifiers are removed from a data set to prevent the mapping back of data to an individual. Although masking refers to the overall approach of covering sensitive data, anonymization is the best answer here because it is more specific to exactly what is being asked. Tokenization involves the replacement of sensitive data with a key value that can be matched back to the real value. However, it is not focused on indirect identifiers or preventing the matching to an individual. Encryption refers to the overall process of protecting data via key pairs and protecting confidentiality.