Q28Application Deployment and SecurityMultiple answers
Which two strategies are used to safeguard personally identifiable information? (Choose two.)
Select 2 answers.
← → navigate · a answer
Community votes
Discussion · 9
20
I’d go with ‘A & C’
A, C 4
Selected Answer: AC
GDPR requires that stored data undergo either an anonymization or a pseudonymization (deidentification) process. In both cases, PII data is removed; however, anonymization irreversibly destroys any way of identifying the data subject, whereas pseudonymization substitutes the identity of the data subject in such a way that with some additional information it is possible to re-identify the data subject. In other words, with pseudonymization, some unique ID is still present, but it’s not personally identifiable. Pseudonymization is less secure, as it allows re-identification either as a result of some authority’s request or due to advanced analytics (for example, from knowing that same person went to certain places, it is possible to deduce who he/she is).
Encryption, integrity, and nonrepudiation technologies are used to protect data confidentiality and reliability. Data protection can be divided into data-at-rest and data-in-transit protection.
Source: Cisco DEVCOR 350-901 Study Guide
A, C 2
Selected Answer: AC
A and C, B looks incorrect as hashing makes the data inaccessible. If you hash a user's address, you cannot retrieve their address anymore.
A, C 2
Selected Answer: AC
A and C are correct.
Basically, encrypt data everywhere you can.
A, C 2
Selected Answer: AC
I’d go with A & C
B seems incorrect, as hashing makes the data inaccessible. If you hash a user's address, you cannot retrieve their address anymore.
1
A and C
1
I think A C could be right
1
A and C. Encrypting data in transit and data at rest is the way to go for all the choices provided.
1
A and C seem to be correct!