An organization wants to track how bonus compensations have changed over time to identify employee outliers and correct earning disparities. This task must be performed without exposing the…

The correct answer is C. Format-preserving encryption. Format-preserving encryption (FPE) satisfies both requirements: it encrypts values while preserving their original format (numbers stay numbers, maintaining relative comparability for outlier detection), and it is reversible - authorized parties with the decryption key can…

Submitted by krish.m· Apr 18, 2026Ensuring data protection

Question

An organization wants to track how bonus compensations have changed over time to identify employee outliers and correct earning disparities. This task must be performed without exposing the sensitive compensation data for any individual and must be reversible to identify the outlier. Which Cloud Data Loss Prevention API technique should you use?

Options

ACryptographic hashing
BRedaction
CFormat-preserving encryption
DGeneralization

How the community answered

(23 responses)

A
4% (1)
B
4% (1)
C
83% (19)
D
9% (2)

Explanation

Format-preserving encryption (FPE) satisfies both requirements: it encrypts values while preserving their original format (numbers stay numbers, maintaining relative comparability for outlier detection), and it is reversible - authorized parties with the decryption key can recover the original values to identify specific individuals once an outlier is flagged. Cryptographic hashing (A) is a one-way function and cannot be reversed. Redaction (B) destroys the data entirely, making outlier analysis impossible. Generalization (D) groups values into ranges, which loses the precision needed to detect individual outliers and is also not truly reversible to a specific value.

Topics

#Data Loss Prevention#Format-preserving encryption#Data privacy#Pseudonymization

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice