Certified Cloud Security Professional (CCSP) — Question 99

Which technique involves replacing values within a specific data field to protect sensitive data?

Answer options

• A. Anonymization
• B. Masking
• C. Tokenization
• D. Obfuscation

Correct answer: B

Explanation

Masking is the correct answer because it specifically refers to altering data to hide its original values while maintaining the format. Anonymization focuses on removing identifiable information altogether, tokenization replaces sensitive data with non-sensitive equivalents, and obfuscation makes data confusing but does not necessarily replace values.