Google Cloud Professional Cloud Security Engineer Practice Exam

Which Cloud Data Loss Prevention API technique should be used to track compensation over time while keeping individual data secure?

1. Hash-based encryption

2. Format-preserving encryption

3. Tokenization

4. Data masking

The correct answer is: Format-preserving encryption

The best option for tracking compensation over time while ensuring the security of individual data is format-preserving encryption. This technique encrypts data in such a way that the format of the original data is maintained, meaning that encrypted data retains its structure, enabling it to be used in applications that require specific data formats. For instance, in situations where compensation data needs to be processed or reported without exposing sensitive individual details, format-preserving encryption allows the data to remain compatible with existing systems that expect a certain data format. This way, organizations can analyze or track compensation trends without compromising individual privacy. In contrast, other methods like hash-based encryption transform the data in such a way that full reversibility is not possible, making it difficult to use the hashed values for tracking or maintaining meaningful analytics over time. Tokenization replaces sensitive data with non-sensitive equivalents (tokens) but may not maintain the original data format, creating challenges for preserving the exact structure required for certain applications. Data masking, while useful for obfuscating sensitive information, does not provide the same level of security while allowing for ongoing operations or data handling. Thus, format-preserving encryption stands out as the ideal technique for balancing data security with operational needs in the context of tracking compensation over time.