Section 13: Data Security

Question 1

Data Life Cycle

Answer 1

o The entire period of time that data exists within your systems
▪ Creation
▪ Usage
▪ Sharing
▪ Storage
▪ Archival
▪ Destruction

Question 2

Data Masking vs Tokenization

Answer 2

Data Masking
▪ Substitutes a generic or placeholder label from real data
▪ Keeps the same format and same structure of the data
SSN = 123-45-6789

o Tokenization
▪ Substitutes a unique token for the real data

SSN=4753951635
Master Table has a list of which tokens correspond to which SSNs
This allows for the information to be reidentified if needed

Question 3

Data Aggregation and Banding

Answer 3

Data Aggregation and Banding
▪ Gathers and generalized the data to protect the individuals involved

67% of students…
9 out of 10

No individuals listed

Question 4

Four actions used by DLP

Answer 4

▪ Alert
● if the DLP is set to alert only, it will allow the data transfer to
continue its destination, but logs and alerts

▪ Block
● Stops the users from being able to copy the file from the shared
drive

▪ Quarantine
● Will block the user from copying the file and then it will take away
the user’s access to even read or open the file

▪ Tombstone
● The file on the share drive is replaced by a file that simply
contains a message that states a policy violation has occurred