Your company wants to determine what products they can build to help customers improve their credit scores depending on their age range. To achieve this, you need to join user information in the…

Question

Options

• ADeterministic encryption
• BSecure, key-based hashes
• CFormat-preserving encryption
• DCryptographic hashing

• A
  82% (14)
• C
  12% (2)
• D
  6% (1)

Explanation

Deterministic encryption (also called Format-Preserving Encryption with a deterministic mode, or using the DLP CryptoReplaceFfxFpeConfig in deterministic mode) always produces the same ciphertext for the same plaintext input using the same key. This property is essential for maintaining referential integrity across databases - if '[email protected]' appears in both the banking app table and the credit score table, it will tokenize to the same value in both, allowing JOIN operations to work correctly. The data is de-identified (the email is not visible) and tokenized (reversible with the key by authorized parties). Option B (secure key-based hashes) and Option D (cryptographic hashing) are one-way operations and cannot be reversed to re-identify users when needed. Option C (format-preserving encryption) preserves the format of the data but in its standard mode is not always deterministic across different encryption calls.

No community discussion yet for this question.