CompTIA DataSys+ (DS0-001)Data and Database SecurityMedium
A data analytics team requires access to a production database for generating reports. However, the database contains highly sensitive personal identifiable information (PII) that should not be directly exposed to the analysts, even though they need to work with the data structure and relationships. Which technique can be used to provide a realistic, yet non-sensitive, dataset for their work?
- AHomomorphic encryption
- BSynthetic data generation
- CFormat-preserving encryption
- DData redaction
Show answer & explanationAnswer & explanation
Correct answer: B. Synthetic data generation
Synthetic data generation creates new, artificial data that statistically resembles the original production data but contains no real PII. This allows analysts to work with a realistic dataset for testing and reporting without exposing sensitive information.
Why the other options are wrong
- A. Homomorphic encryption allows computations on encrypted data but doesn't produce a non-sensitive dataset for direct analysis.
- C. Format-preserving encryption encrypts data while maintaining its original format, but the data is still encrypted real data, not a non-sensitive replacement.
- D. Data redaction permanently removes or masks sensitive parts of data, but the remaining data is still real, not a new dataset.
Synthetic Data Generation
The process of artificially creating new data that statistically mirrors real-world data but does not contain any actual sensitive information.
- Maintains statistical properties and relationships of original data.
- Used for testing, development, and analytics without PII exposure.
- Requires sophisticated algorithms to ensure realism and utility.
Memory trick: Anonymization uses tricks to hide identities.