A company replaces customers' credit card numbers with non-sensitive surrogate values so that the original data isn't exposed. Which technique is this?

The correct answer is B. Tokenization. Tokenization replaces sensitive data with a token (a reference value) and stores the mapping separately. Encryption transforms data but allows reversal with a key; masking obscures but often in-place; hashing is one-way. Tokenization is best for PCI/credit card security.

Submitted by devops_kid· Apr 18, 2026Cloud Data Security

Question

Options

AEncryption
BTokenization
CMasking
DHashing

How the community answered

(40 responses)

A
3% (1)
B
93% (37)
C
5% (2)

Explanation

Tokenization replaces sensitive data with a token (a reference value) and stores the mapping separately. Encryption transforms data but allows reversal with a key; masking obscures but often in-place; hashing is one-way. Tokenization is best for PCI/credit card security.

Topics

#Tokenization#Data Protection#Sensitive Data#Data Security Techniques

Community Discussion

No community discussion yet for this question.

Full CCSP Practice