ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

Differential privacy adds carefully calculated statistical noise to query results or data values so the contribution of any single individual is indistinguishable, even to those who possess other knowledge or the original source data. Because no lookup table or direct identifier survives-and re-identification risk is mathematically bounded-it meets the requirement for irreversible, organization-agnostic anonymity. Tokenization keeps a secret mapping that internal staff could use to reverse the process. Simple hashing may be vulnerable to dictionary or frequency attacks, especially against small or predictable input spaces. Truncating or redacting fields reduces precision but may still allow linkage attacks that combine quasi-identifiers, so it does not guarantee anonymity.