nerdexam
(ISC)2

CCSP · Question #325

Tokenization requires two distinct ______________. Response:

The correct answer is B. Databases. Tokenization, particularly in payment processing, typically involves two distinct databases: one to store the original sensitive data and another to store the generated tokens and their mapping to the original data.

Submitted by daniela_cl· Apr 18, 2026Cloud Data Security

Question

Tokenization requires two distinct ______________. Response:

Options

  • AAuthentication factors
  • BDatabases
  • CEncryption keys
  • DPersonnel

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    88% (28)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Tokenization, particularly in payment processing, typically involves two distinct databases: one to store the original sensitive data and another to store the generated tokens and their mapping to the original data.

AAuthentication factors

Authentication factors relate to verifying user identity, not the technical implementation of tokenization.

BDatabasesCorrect

Tokenization usually involves a system that generates a non-sensitive token to replace sensitive data, and this process often requires two distinct databases. One database stores the actual sensitive data, securely protected, while the other database or token vault stores the generated tokens along with a mapping that links them back to the original sensitive data, without revealing the sensitive data itself.

CEncryption keys

While encryption might be used within a tokenization scheme, two distinct encryption keys are not a fundamental requirement for the tokenization process itself, which focuses on data replacement.

DPersonnel

Personnel are involved in operating systems but are not a technical requirement for the tokenization mechanism itself.

Concept tested: Tokenization architecture

Source: https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-data-minimization-tokenization

Topics

#Tokenization#Data security#Data segregation#Database architecture

Community Discussion

No community discussion yet for this question.

Full CCSP Practice