1. Tokenisation & Masking advanced

    A communications platform must reduce the systems handling customer phone numbers and message content. Tokenisation or field-level encryption?

    1 min answer tokenisationencryptionscope-reductionpii
  2. Tokenisation & Masking advanced

    A digital bank must reduce the systems that handle raw account numbers. What does tokenisation achieve, and what does it not?

    2 min answer jupitertokenisationscope-reductionvault
  3. Tokenisation & Masking intermediate Multiple choice

    A marketplace must stop storing raw phone numbers in its analytical estate. Analysts still need to join orders to support tickets by the same customer, and the company must be able to delete an individual's data on request. Which approach fits?

    2 min answer tokenisationhashingerasurejoinability
  4. Tokenisation & Masking advanced

    A payments gateway of the kind Razorpay operates tokenises customer mobile numbers before they reach the analytical estate, using deterministic tokens so analysts can still join orders to support tickets. Nine months later a red team reconstructs the mapping for a large share of customers without ever touching the token vault. What did the design assume, and which decision made the attack possible?

    3 min answer tokenisationpseudonymisationre-identificationenumeration
  5. Tokenisation & Masking intermediate

    Customer phone numbers are replaced with vault-issued tokens at ingest, and the four services allowed to see raw values call the vault to detokenise on demand. The vault becomes slow rather than down - p99 goes from 8 ms to 4 seconds - for three hours during the evening peak. What happens across the estate, and what stops it?

    3 min answer tokenisationvaultavailability-couplingtimeouts