Courseiva
Cloud Data SecuritymediumMultiple SelectObjective-mapped

CCSP Cloud Data Security Practice Question

A cloud security team is evaluating DLP techniques to protect sensitive data in a cloud data warehouse. They want to replace sensitive values with realistic but fictitious data for non-production environments while preserving referential integrity. Which TWO de-identification techniques are suitable?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Pseudonymization

Tokenization replaces sensitive data with a token that can be consistent across tables, preserving referential integrity. Pseudonymization replaces identifiers with consistent pseudonyms, also preserving relationships.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Pseudonymization

    Why this is correct

    Correct: Pseudonymization replaces identifiers with consistent pseudonyms, preserving relationships.

  • Bucketing

    Why it's wrong here

    Bucketing generalizes data into ranges, not suitable for realistic replacement.

  • Masking

    Why it's wrong here

    Masking obscures parts of data, not suitable for generating realistic fictitious data.

  • Tokenization

    Why this is correct

    Correct: Tokenization can maintain referential integrity if tokens are deterministic.

  • Date shifting

    Why it's wrong here

    Date shifting moves dates, not a general replacement for sensitive values.

About these practice questions

Courseiva writes every CCSP question from scratch — 964 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.