Explains data masking and its limits

https://knobit.org/id/knobit/S-353

Context functions	Object understanding
Knobit creation methods	AI generated
Knobit types	Knowledge
LCG purposes	Assessing the learner's knowledge or skill state
LCG purposes	Opening up a learning outcome
action verb	Explains en
assessment criterion	Answers a written question on the data masking correctly en
assessment method	Written question en
conforms to profile	https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1
dcterms:identifier	S-353
dcterms:license	https://creativecommons.org/licenses/by/4.0/
dcterms:source	Practice the stage 3 reference and review checklist rest on en
depends on knobit	Explains how database tables and relationships are structured
expected result	Masking hides values from roles that need less, and holds only if no key, copy or filter in reach recovers them (ISO/IEC 27002:2022 8.11). en
owl:sameAs	https://bitbucket.org/reffa/ontology/id/knobit/data-security/03-access-control/S-353
rdfs:label	Explains data masking and its limits en
schema:creativeWorkStatus	accepted
schema:isPartOf	Data security and privacy (DAMA-DMBOK2)
skos:definition	Masking hides values from roles that need less, and holds only if no key, copy or filter in reach recovers them (ISO/IEC 27002:2022 8.11). en
skos:prefLabel	Explains data masking and its limits en
target object	data masking en

Used by

applies knowledge	Recognises masking a join can undo
applies knowledge	Recognises masking applied to one copy only
applies knowledge	Closes the clear-text paths around a masked column
includes knobit	Designs access by need, with duties segregated and masking that holds
includes knobit	Implement controls: manage users, roles and permissions; control access to restricted data
requires knobit	Design access control