Exam SY0-601 topic 1 question 234 discussion

Shouldn't the answer be D?

Tokenization is the best approach for storing credit card information securely in a database while allowing for an easy reordering process. Tokenization is a process in which sensitive data, such as credit card numbers, is replaced with a randomly generated token. The actual credit card information is securely stored in a separate, isolated system, often managed by a third-party payment processor. Here's why tokenization is the best choice: Security: Tokenization removes the need to store actual credit card numbers in the website's database, reducing the risk of a data breach or unauthorized access to sensitive information. Easy Reordering: When a customer reorders using a saved credit card, the website can use the token to reference the actual credit card information securely stored with the payment processor, making the reordering process seamless for the user.

Credit cards and tokenization are always linked

D is the right answer bcz credit card information is dealing with the storage not transit (https://quizlet.com/853207253/exam-questions-pt-8-flash-cards/)

A: There's no stripe in e-commerce. B: It's about stored information. C: Hashing it's not an easy way. D: It's a good way to store credit card numbers..

Question states "most appropriate way to (store) credit card numbers" Keyword here is store Answer would be D.

Going against the grain and choosing C because CompTIA's official study guide has this to say about database hashing: "Hashing is used for two main purposes within a database: * As an indexing method to speed up searches and provide deidentified references to records. * As a storage method for data such as passwords where the original plaintext does not need to be retained."

I chose D over B.

D. Tokenizing the credit cards in the database would be the best method to store credit card numbers for an easy reordering process on an e-commerce website. Tokenization is a process of substituting sensitive data with unique identification symbols that retain all the essential information about the data without compromising its security. This method ensures that the actual credit card information is not stored in the database, reducing the risk of data compromise if the database is breached.

To help those who may need to see it in another way A: It's "e-commerce" so the stripe of the card has no relevance here B: In transit doesn't work because we are looking at stored information C: Hashing will always SOUND good but that isn't applicable either. So this won't be it either.

answer should be D

redit card tokenization is the process of de-identifying sensitive cardholder data by converting it to a string of randomly generated numbers called a "token." Similar to encryption, tokenization obfuscates the original data to render it unreadable in the event of a data breach or other exposure.

https://youtu.be/bCknf8goMH0?t=90 D. Tokenization