Certified Cloud Security Professional (CCSP) — Question 371

What process entails taking sensitive data and removing the indirect identifiers from each data object so that the identification of a single entity would not be possible?

Answer options

• A. Tokenization
• B. Encryption
• C. Anonymization
• D. Masking

Correct answer: C

Explanation

Anonymization is the correct answer because it specifically involves altering data to eliminate any possibility of identifying individuals. Tokenization and encryption serve different purposes: tokenization replaces sensitive data with non-sensitive equivalents, while encryption secures data but does not remove identifiers. Masking alters data for obfuscation but does not necessarily anonymize it.