CDPSE Enhancing Technologies 4

Question 1

Which technique enables a researcher to determine whether a specific individual's data is in a dataset without the organization revealing the dataset contents?

Accepted Answer

Private information retrieval (PIR)

Answer

Private information retrieval (PIR) allows a user to query a database and retrieve a record without the database owner learning which record was accessed.

Question 2

Format-preserving encryption (FPE) is preferred over standard encryption in some data systems because:

Accepted Answer

It produces ciphertext in the same format as plaintext, minimizing application changes

Answer

FPE maintains the format (length, character set) of the original data, allowing encrypted values to pass validation rules and minimizing changes to downstream systems.

Question 3

In the context of PETs, what is 'data vault tokenization' primarily designed to protect against?

Accepted Answer

Exposure of sensitive data in case of a breach by storing tokens instead of real values in application systems

Answer

Data vault tokenization ensures that even if the application database is breached, attackers only obtain tokens with no value outside the secure vault, limiting breach impact.

Question 4

Which emerging privacy-enhancing technology uses cryptographic commitments to allow auditors to verify data processing compliance without accessing the underlying data?

Accepted Answer

Zero-knowledge proofs

Answer

Zero-knowledge proofs allow a party to prove that a computation was performed correctly or that data meets certain criteria without revealing the actual data to the verifier.

Question 5

A financial services firm wants to analyze transaction patterns across multiple banks without any bank revealing its customers' individual transactions to the others. The most appropriate PET is:

Accepted Answer

Secure multi-party computation (SMPC)

Answer

SMPC allows multiple banks to jointly compute analytics on their combined data without any party ever seeing another party's raw transaction records.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Enhancing Technologies 4