Question 1 · choose 1
Analysts at a health insurer must join claims and pharmacy datasets by member, without seeing member IDs. A small, authorized fraud team must be able to recover the real ID when it investigates a case. Which technique fits?
- ARedacting the member IDs from both of the datasets
- BPseudonymization with a reversible, two-way token
- CMasking every member ID with asterisk characters
- DGeneralizing member IDs into numeric ranges
Show the answer and why
ARedacting the member IDs from both of the datasets
Incorrect
Redaction removes the value entirely, so the datasets can no longer be joined by member and nothing can be recovered.
BPseudonymization with a reversible, two-way token
Correct
Pseudonymization replaces values with cryptographic tokens; consistent tokens keep the datasets joinable, and a two-way token can be reversed with the same key by those allowed to use it.
CMasking every member ID with asterisk characters
Incorrect
Character masking hides the value but destroys it as a join key and cannot be reversed.
DGeneralizing member IDs into numeric ranges
Incorrect
Bucketing into ranges suits numbers such as ages; it breaks one-to-one matching of members and cannot be reversed.
Anonymizing transformations such as redaction and masking are irreversible; pseudonymization keeps data useful and, with two-way tokens, recoverable under control.
Google Cloud documentation