CCSP · Question #325
Tokenization requires two distinct ______________. Response:
The correct answer is B. Databases. Tokenization, particularly in payment processing, typically involves two distinct databases: one to store the original sensitive data and another to store the generated tokens and their mapping to the original data.
Question
Tokenization requires two distinct ______________. Response:
Options
- AAuthentication factors
- BDatabases
- CEncryption keys
- DPersonnel
How the community answered
(32 responses)- A3% (1)
- B88% (28)
- C6% (2)
- D3% (1)
Why each option
Tokenization, particularly in payment processing, typically involves two distinct databases: one to store the original sensitive data and another to store the generated tokens and their mapping to the original data.
Authentication factors relate to verifying user identity, not the technical implementation of tokenization.
Tokenization usually involves a system that generates a non-sensitive token to replace sensitive data, and this process often requires two distinct databases. One database stores the actual sensitive data, securely protected, while the other database or token vault stores the generated tokens along with a mapping that links them back to the original sensitive data, without revealing the sensitive data itself.
While encryption might be used within a tokenization scheme, two distinct encryption keys are not a fundamental requirement for the tokenization process itself, which focuses on data replacement.
Personnel are involved in operating systems but are not a technical requirement for the tokenization mechanism itself.
Concept tested: Tokenization architecture
Source: https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-data-minimization-tokenization
Topics
Community Discussion
No community discussion yet for this question.