Exam CAS-004 topic 1 question 179 discussion

Actual exam question from CompTIA's CAS-004

Question #: 179
Topic #: 1

A company would like to obfuscate PII data accessed by an application that is housed in a database to prevent unauthorized viewing. Which of the following should the company do to accomplish this goal?

A. Use cell-level encryption.
B. Mask the data.
C. Implement a DLP solution.
D. Utilize encryption at rest.

Show Suggested Answer

Suggested Answer: B 🗳️

by adamwella at Sept. 20, 2022, 4:28 p.m.

Comments

Submit Cancel

FOURDUE

1 year ago

i wish they used the term DATA AT REST instead of encryption at rest.. masking the data seems the correct choice.

upvoted 2 times

...

hidady

1 year, 1 month ago

B is correct "Mask the data"

upvoted 2 times

...

Mr_BuCk3th34D

1 year, 1 month ago

Selected Answer: B

Key word here is obfuscation: To obfuscate PII data accessed by an application housed in a database, the company should mask the data. This can be done by replacing the actual data with fake data that has the same format and characteristics, but is not sensitive or identifiable. This can be done using techniques such as data masking or data pseudonymization.

upvoted 4 times

...

sh4dali

1 year, 3 months ago

I meant B. Data masking

upvoted 4 times

...

sh4dali

1 year, 3 months ago

Selected Answer: A

Agree with Andy2345. A

upvoted 1 times

...

adamwella

1 year, 4 months ago

Not sure why it wouldn't be D. Utilize encryption at rest. Any insights?

upvoted 1 times

Andy2345

1 year, 4 months ago

Data masking appears to be more useful in situations involving SSNs, phone numbers, etc. https://www.tokenex.com/blog/ab-what-is-data-masking-data-masking-vs-encryption-for-data-security#:~:text=Data%20Masking%20vs%20Data%20Encryption,is%20unreadable%20without%20a%20key.

upvoted 3 times

...