nerdexam
Isaca

CISA · Question #499

Which of the following is the BEST way to ensure personal data used for a data analytics project cannot be identified?

The correct answer is B. Anonymization. Anonymization irreversibly removes or transforms personal identifiers so that individuals cannot be re-identified, even when the data is combined with other datasets. This is the strongest privacy protection for analytics use cases. Tokenization (A) replaces data with a token tha

Submitted by dimitri_ru· Apr 18, 2026Protection of Information Assets

Question

Which of the following is the BEST way to ensure personal data used for a data analytics project cannot be identified?

Options

  • ATokenization
  • BAnonymization
  • CReidentification
  • DRandomization

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    88% (29)
  • C
    3% (1)
  • D
    6% (2)

Explanation

Anonymization irreversibly removes or transforms personal identifiers so that individuals cannot be re-identified, even when the data is combined with other datasets. This is the strongest privacy protection for analytics use cases. Tokenization (A) replaces data with a token that maps back to the original via a vault - it is reversible and therefore does not prevent identification by those with vault access. Reidentification (C) is the process of re-linking anonymized data back to individuals, which is the opposite of the goal. Randomization (D) introduces noise but does not systematically remove identifying attributes and alone does not prevent re-identification.

Topics

#Data privacy#Data anonymization#Personal data protection#Data identification

Community Discussion

No community discussion yet for this question.

Full CISA Practice