Which process scans content and applies regular expressions to mask the sensitive information?

Question

Options

• AData leak prevention
• BData masking
• CData filtering
• DData scanning

• A
  7% (3)
• B
  89% (41)
• C
  2% (1)
• D
  2% (1)

Explanation

Data masking (B) is correct because it is specifically the process that scans content and applies transformations - including regular expressions - to replace or obscure sensitive data (e.g., replacing 4111-1111-1111-1111 with ****-****-****-1111) while preserving the data's format and usability.

Why the distractors are wrong:

• A. Data leak prevention (DLP) - DLP detects and blocks unauthorized transmission of sensitive data; it may use pattern matching internally, but its goal is prevention of exfiltration, not masking the data itself.
• C. Data filtering - Filtering removes or excludes data based on criteria (e.g., blocking certain content types); it doesn't replace sensitive values with masked equivalents.
• D. Data scanning - Scanning is the discovery phase - identifying where sensitive data exists - but it doesn't alter or mask the content.

Memory tip: Think of "masking" like a costume - the data is still there underneath, just hidden from view. Regex patterns are the "costume maker" that know exactly which characters to cover up.

No community discussion yet for this question.